this ist my scep.conf:
## Secure Server Configuration File
## (c) 1999 by Massimiliano Pala and the OpenCA Group
##
## Please Refer to the Documentation for a full detailed
## description of params. Read the README file in this dir
## for more infos on programs accessing this file.
## ============== [ General Section ] =========================
DEFAULT_LANGUAGE "de_DE"
DEFAULT_CHARSET "iso-8859-1"
DBmodule "DBI"
CgiLibPath "/opt/openca-0.9.2-RC3/OpenCA/lib/servers/scep/functions"
CgiCmdsPath "/opt/openca-0.9.2-RC3/OpenCA/lib/servers/scep/cmds"
CgiServerType "scep"
HtdocsUrlPrefix ""
SessionDir /opt/openca-0.9.2-RC3/OpenCA/var/session/cookie/scep
SessionLifetime 1200
ModuleID 33
ModuleShift 8
AccessControlConfiguration "/opt/openca-0.9.2-RC3/OpenCA/etc/access_control/scep.xml"
SoftwareConfiguration "/opt/openca-0.9.2-RC3/OpenCA/etc/config.xml"
RoleConfiguration "/opt/openca-0.9.2-RC3/OpenCA/etc/rbac/roles.xml"
ModuleConfiguration "/opt/openca-0.9.2-RC3/OpenCA/etc/rbac/modules.xml"
TokenConfiguration "/opt/openca-0.9.2-RC3/OpenCA/etc/token.xml"
LogConfiguration "/opt/openca-0.9.2-RC3/OpenCA/etc/log.xml"
CertsDir "/opt/openca-0.9.2-RC3/OpenCA/var/crypto/certs"
CACertificate "/opt/openca-0.9.2-RC3/OpenCA/var/crypto/cacerts/cacert.pem"
ChainDir "/opt/openca-0.9.2-RC3/OpenCA/var/crypto/chain"
CRLDir "/opt/openca-0.9.2-RC3/OpenCA/var/crypto/crls"
## Paths
openssl "/usr/bin/openssl"
opensslEngine ""
sslconfig "/opt/openca-0.9.2-RC3/OpenCA/etc/openssl/openssl.cnf"
scepPath "/opt/openca-0.9.2-RC3/bin/openca-scep"
tempdir "/opt/openca-0.9.2-RC3/OpenCA/var/tmp"
crlfile "/opt/openca-0.9.2-RC3/OpenCA/var/crypto/crls/cacrl.crl"
## ==================== [ SCEP Section ] ======================
## It is just an example, you should change the 03.pem and/or
## the path pointing to the right key/cert pair
ScepRACert "/opt/openca-0.9.2-RC3/OpenCA/var/scep/scep.key"
ScepRAKey "/opt/openca-0.9.2-RC3/OpenCA/var/scep/scep.crt"
ScepRAPasswd "****"
## ================== [ End SCEP Section ] ====================
Openssl tells this about scep.crt:
# openssl x509 -in scep.crt -noout -text
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 1 (0x1)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=de, O=taunusstein.net, OU=TrustCenter Taunusstein, CN=ca.taunusstein.net/[EMAIL PROTECTED]
Validity
Not Before: Apr 27 16:02:03 2004 GMT
Not After : Apr 27 16:02:03 2005 GMT
Subject: C=de, ST=Hessen, L=Taunusstein, O=taunusstein.net, OU=VPN-RA, CN=VPN Admin/[EMAIL PROTECTED]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:bb:85:d7:7f:1e:04:d3:c2:d0:d2:15:ca:d0:e6:
<hex stuff deleted>
5e:a7:25:17:32:e3:c6:ad:61
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
6e:6b:a6:04:b4:4a:b8:61:47:c8:bf:a9:57:4a:7f:70:2f:bc:
<hex stuff deleted>
65:ff:33:60:76:37:42:07
#
I used a key and crt file which is compatible to mod_ssl, checked against an Apache 2.0.49. There is still one certificate transmitted.
regards
Christian
dalini writes:
pug wrote: how is your openca setup?
------------------------------------------------------- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
