Here's what I've accomplished so far.. I've set up a CA, fairly easy and standard. I've gotten the CA's cert into the cisco router for use for known-CA verification. I've gotten the router to make a certificate signing request, but it's making the request in a PKCS7 format. But since I'm less than savvy when it comes to quite a bit of this stuff, I can't seem to figure out which part of the PKCS7 object I'm to sign, and exactly how to sign it. This URL contains quite a bit of information that someone with more knowledge than I do could make some sense of, and may be able to figure out what needs to be done. The PKCS7 object is at the bottom of this message as well. http://www.cisco.com/warp/public/cc/cisco/mkt/security/tech/scep_wp.htm I'm having a feeling that the solution is going to require me writing a program to tear apart the PKCS7 object and do something with it. So, if anyone has a pointer to an introduction to programming with OpenSSL (and a good technical explanation of encryption and what not), or has the time and patience to give me a quick start, it'd be muchly appreciated. Thanks! Matt Burgoon ([EMAIL PROTECTED]) -----BEGIN PKCS7----- MIAGCSqGSIb3DQEHAqCAMIIGXQIBATEOMAwGCCqGSIb3DQIFBQAwgAYJKoZIhvcN AQcBoIAEggK9MIAGCSqGSIb3DQEHA6CAMIACAQAxgDCBoAIBADBKMEUxCzAJBgNV BAYTAkFVMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBX aWRnaXRzIFB0eSBMdGQCAQAwDQYJKoZIhvcNAQEBBQAEQBeR5798VAuNs0yQAXXZ HdAfc+KcW3HwALOfYt5gflTSD2Lgsvy9MgOJlPjl/25pcp0BpHSTHqSALH4SrDji Nd4AADCABgkqhkiG9w0BBwEwEQYFKw4DAgcECIN5MCh/m0zfoIAEggHIOHdKxdNc zitQrcX3Mnv3k6PliGPFJg0+N/ndEcLVAcHGW4ooIM7MenARASyTZ4Q+QuzmVa1W HJIx28VZq6/z3dFtfsgKjqQMzF3qjzNSIoyLRZx6s8HhDKubYkrg7mpMxub7/T3X srLT8RdMIPHuSFsgzBeKPkElLYetgj1ClYTiWIVg80IDafFqoJ9w/AH6IumMj0+P JNh6ImPjKcnheyyVfOhCJWPEnVTjZ2Bh9ao9iCntEtUnuOE50CeE8j1SdWmiqOb7 CNoSKykad9tdisJKFyR7d4UX8Q+uORWPL71SKLm3+WZ2MuYV0oeoJE+EO06P4s+0 RE0+LZfoD226ivencSWRQitKKttyJaY4ObP5Np0+tM7caoqHC8B/YvcNW6lYBbFj BoFBEm3FGy96Qx47bynaf2KnkmbotJU3FmthstQBNb2P/4a+phxzPC6ir/aNx6+Q sCi4CXpTIYpJ0kqtuKdkUhSDsDNE/3DX3na0hr0GIEikDLHi2dHmfdRfVJmQiM74 BeHC3PZYlaChXZqmJX5GmMgJRGzTHkXppipn0hu+FJvenSCVbPl3b0814wf7kDAG D+BYJsZlv+PqOoWT2hxYy5GYBAjBc01xJtbP6AAAAAAAAAAAAAAAAAAAoIIB2DCC AdQwggE9AiAxREIyRkU1MUMyRjVGQTk1QkE4QjI3RERGQ0JEM0Y1NTANBgkqhkiG 9w0BAQQFADAjMSEwHwYJKoZIhvcNAQkCFhJibGFja2hvbGUua3VpdC5jb20wHhcN OTMwMzAxMDAwMDI3WhcNMDMwMjI3MDAwMDI3WjAjMSEwHwYJKoZIhvcNAQkCFhJi bGFja2hvbGUua3VpdC5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMr6 /afJUSWqSiSU2YEJXL2/W3QBUdBwoZ4/YDA8NhPMhKsq4cejoF/aINsGI0pfrFQ8 gZ+9mclEgqwnCOJGn1QzYiQ3aJ5fSvgvXpK/ovQB8IjaHtloeNHOoM+W27G0syK6 AsD1WqBuzH88PweeAxQCJ8b5U+1F/GZKw5EJM7Y/AgMBAAEwDQYJKoZIhvcNAQEE BQADgYEAoqg+vGYC5bvNN+Hee2f8PULZ18T+FO1Oj/mTkHy/OOIKLh9WK2r3plg7 +f1I3zWyuF2NDMDUNL+8Tg2AzSE7XSuA2gV9viNsPzxJHxDUVVTtveCgndej7+AJ mz+HBd2YjyDe/RExYyYOZgZG7zh7Ilyg/tMYO0qShed4fs0JUy0xggGWMIIBkgIB ATBHMCMxITAfBgkqhkiG9w0BCQIWEmJsYWNraG9sZS5rdWl0LmNvbQIgMURCMkZF NTFDMkY1RkE5NUJBOEIyN0RERkNCRDNGNTUwDAYIKoZIhvcNAgUFAKCBozASBgpg hkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHwYJKoZI hvcNAQkEMRIEEOIoImSR4FHDhQyU8GHN/fowIAYKYIZIAYb4RQEJBTESBBDYOIOH 1m3VzrN7q/jEypd3MDAGCmCGSAGG+EUBCQcxIhMgMTY1Q0JCOUU0QTE1Rjg3QjY3 MDU5QkVGRDlBMzc1QkYwDQYJKoZIhvcNAQEBBQAEgYBWRXZJq+L56lHqfDPb/g9n q0UCVju4lEjQVd9Bq33tpf1D/O4QqU80WPJ2sGrrWe9g6KiNA6+jW5GL+RSCQc8j NeN22NYptqiY/ABI0CvdBHqTgF7oHKGFkBnHOWef16ipesCC5p/+Ru+UB85grzlb rZLk0vbzU9KBRpW1fwUHpQAAAAA= -----END PKCS7----- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
