denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pki: Enroll an X.509 certificate with a SCEP server

Browse Source
This commit is contained in:
Andreas Steffen
2022-08-24 20:46:44 +02:00
parent a9d70bd485
commit 7c7a5a0260
6 changed files with 893 additions and 133 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/pki.opt
+5 -1
View File
@@ -1,2 +1,6 @@
pki.load =
Plugins to load in ipsec pki tool.
Plugins to load in the pki tool.
pki.scep.renewal_via_pkcs_req = no
Some SCEP servers (e.g. openxpki) are incorrectly doing certificate renewal
via messageType PKCSReq (19) instead of RenewalReq (17).