pki: Additional pki.scep options for strongswan.conf
This commit is contained in:
@@ -1,6 +1,12 @@
|
||||
pki.load =
|
||||
Plugins to load in the pki tool.
|
||||
|
||||
pki.scep.http_bind
|
||||
Source IP address to bind for HTTP operations.
|
||||
|
||||
pki.scep.http_timeout = 30s
|
||||
Timeout for HTTP operations.
|
||||
|
||||
pki.scep.renewal_via_pkcs_req = no
|
||||
Some SCEP servers (e.g. openxpki) are incorrectly doing certificate renewal
|
||||
via messageType PKCSReq (19) instead of RenewalReq (17).
|
||||
|
||||
Reference in New Issue
Block a user