Re: [OpenXPKI-users] Error registering SCEP RA token in OpenXPKI Community Edition

2025-09-03 Thread Mark via OpenXPKI-users
Hi Oliver, Thank you for the information.  I ended up reinstalling OpenXPKI using the instructions in the Quickstart guide. Just as I did previously, I installed the demo configuration with sampleconfig.sh and then I tested SCEP. I initially tested SCEP with the sscep tool. Then I tested SCEP w

Re: [OpenXPKI-users] Error registering SCEP RA token in OpenXPKI Community Edition

2025-08-31 Thread Oliver Welter
Hi Mark, openssl  req -new -keyout test.key -out test.crt -x509 -subj "/CN=Testcert" -passout pass:12345 - cat test.key -BEGIN ENCRYPTED PRIVATE KEY- MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIfHv1x8Fyk/0CAggA ... -END ENCRYPTED PRIVATE KEY- oxi token add --realm democa

Re: [OpenXPKI-users] Error registering SCEP RA token in OpenXPKI Community Edition

2025-08-29 Thread Mark via OpenXPKI-users
Hi Mark, Thank you for your quick response. I did not realise that sampleconfig automatically adds a SCEP certificate. If I had taken the time to view the script before submitting this request I would have seen the SCEP entry for scep.crt and scep.key. I plan to continue testing SCEP with the

Re: [OpenXPKI-users] Error registering SCEP RA token in OpenXPKI Community Edition

2025-08-28 Thread Oliver Welter
Hi Mark, first of all - sampleconfig already sets up the cli connection and also adds a SCEP certificate, does this work for you? What format is your SCEP key? Currently only RSA is supported and I had some issues in the past with encrypted key - so if you can perhaps share the command you u

[OpenXPKI-users] Error registering SCEP RA token in OpenXPKI Community Edition

2025-08-28 Thread Mark via OpenXPKI-users
I have built OpenXPKI Community Edition v3.32.8 on Debian 12.11 using the demo configuration (sampleconfig.sh). It is running and issuing certificates from externally-generated CSRs. I wish to enable the SCEP Server so, following the instructions in the Quickstart guide, I have generated a 'TLS/