pki: Additional pki.scep options for strongswan.conf

This commit is contained in:
Andreas Steffen
2022-08-24 20:46:44 +02:00
parent 93f2901d1a
commit 122796df27
5 changed files with 45 additions and 49 deletions
+6
View File
@@ -1,6 +1,12 @@
pki.load =
Plugins to load in the pki tool.
pki.scep.http_bind
Source IP address to bind for HTTP operations.
pki.scep.http_timeout = 30s
Timeout for HTTP operations.
pki.scep.renewal_via_pkcs_req = no
Some SCEP servers (e.g. openxpki) are incorrectly doing certificate renewal
via messageType PKCSReq (19) instead of RenewalReq (17).