Hello Franz,

the format of the SCEP wrapper config in /etc/openxpki/scep has also changed, please have a look at the sample config on github and adjust your config layer accordingly.

Oliver

Am 17.08.22 um 15:38 schrieb [email protected]:
Dear community,

we upgraded to version 3.20 a while ago since we wanted to test out the new SCEP features, to get some systems working that have problems with it currently. After we enabled the new scepv3 script in webserver, we get the following error when trying to request the ca certs via SCEP:

2022/08/17 15:20:45 DEB Config for service scep loaded [pid=20355]
2022/08/17 15:20:45 INF SCEP handler initialized [pid=20355]
2022/08/17 15:20:45 WAR Unable to detect script name - please check the docs [pid=20355]
2022/08/17 15:20:45 DEB added config to cache default [pid=20355]
2022/08/17 15:20:45 DEB Incoming SCEP operation GetCACaps on endpoint  [pid=20355]
2022/08/17 15:20:45 DEB Config created [pid=20355]
2022/08/17 15:20:45 DEB Start workflow type scep_getcacaps [pid=20355]
2022/08/17 15:20:45 DEB Initialize client [pid=20355]
2022/08/17 15:20:45 DEB Started volatile session with id: tRJ9UclfQ1SChc2od9Y5bQ== [pid=20355] 2022/08/17 15:20:45 FAT Found more than one auth stack but no stack is specified [pid=20355]

We do have auth stacks configured in the stack.yaml inside the realm-config, it seems like we need to specify one for SCEP requests now? Unfortunately I didnt find anything regarding this in the documentation of the SCEP server, could you please point us out on where the auth stack needs to be configured?

Thanks for your help.

Regards,
Franz

Here you will find all information on the processing of personal data within the Lindner Group. DATA PROTECTION <https://www.lindner-group.com/de_DE/dsgvo/>



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users


--
Protect your environment -  close windows and adopt a penguin!


_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to