Hi Dave,
any progress on your SCEP- project? I am also planning to implement SCEP
using OpenSSL and do not want ro re-invent the wheel ;-)
regards,
janus
dave madden wrote:
>
> Hi.
>
> I'm trying to use OpenSSL to create certificates for a Cisco PIX
> firewall/vpn box. I've been able to download my CA cert to the PIX,
> and (thanks to Matt Burgoon!) I've extracted the PIX's certificate
> request from the PKCS7 object it sends when you tell it to acquire a
> cert. However, the protocol for returning a certificate to the PIX
> differs somewhat from the way a Cisco router works, so I don't believe
> Matt's trick of simply typing in the hex-ified certificate will work.
> In addition, I'd really prefer to put together a cleaner solution with
> a nice web interface, since I have a bunch of PIXes to set up and
> none-too-technical people to help me.
>
> So, I need to create several PKCS7 messages, which I will BER-encode
> and return to the PIX when it submits a request. I've been rooting
> around in apps/pkcs7.c, but it appears to be exclusively an unpacking
> tool; I don't understand how to go from a list of stuff I want to
> pack, to a PKCS7 message containing all the stuff.
>
> Can anyone suggest a useful example to follow, or (even better) a
> procedure for using the existing tools to interact with the PIX? (The
> Cisco docs at
> http://www.cisco.com/warp/public/cc/cisco/mkt/security/tech/scep_wp.htm
> describe the protocol I hope to implement.)
>
> Thanks,
> d.
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
S/MIME Cryptographic Signature
