Hey OpenXPKI experts…
I'm back on my kick of trying to get some things working with scep.

TL;DR I get this error: openxpki.system.FATAL Uncaught exception: Can't
locate object method "new" via package "OpenXPKI::Service::SCEP" (perhaps
you forgot to load "OpenXPKI::Service::SCEP"?) at /
usr/local/lib/perl5/site_perl/OpenXPKI/Server.pm line 451, <DATA> line 1.

 "Starting with v3.18, the default configuration uses a pure perl
implementation for the SCEP server so there is no need to install any
additional tools anymore."

I had been using LibSCEP (not sure why) and modified my scep config to
remove LibSCEP and update it to the current format as follows:

[global]
socket=/var/openxpki/openxpki.socket
realm=dzsec
servername=generic
iprange=0.0.0.0/0
log_config = /usr/local/etc/openxpki/scep/log.conf
log_facility = client.scep
encryption_algorithm=aes192
hash_algorithm=SHA256


[logger]
# A loglevel of DEBUG MIGHT disclose sensitive user input data
# A loglevel of TRACE WILL dump any communication unfiltered
log_level = DEBUG

[auth]
stack=_System

# OpenXPKI supports mapping additional URL Parameters to the workflow
# Those must be whitelisted here for security reasons
[PKIOperation]
param = signature

I don't have anything in system.yaml that explicitly turns off SCEP
(Am I correct that's what this section of the docs refers to?)

"The scep functionality is included as a special service with the core
distribution and enabled by default. You can turn it off in the global
system configuration (*system.server.service*)."
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to