Hi, I have tried to reproduce the problem with Cisco IOS-XE but so far I have been unable to see any problem. In my tests, the request always have correct issuer and serial certificate of local/remote router. What is the failure scenario?
Regards, Carlos Velasco Oliver Welter escribió el 08/11/2021 a las 18:04:
Hi Daniel, All, just as a follow up for this... a) I have posted an update for sscep to "fix" the retrieval of a CRL (not perfect but will do the job) b) After almost a day debugging with several test data I am pretty sure that LibSCEP does the "right" job if the correct information was requested. The example data provided by Daniel by PM shows the same "defect" as sscep does, it sends a Issuer/serial request where serial and issuer do not reference a valid certificate. As already announced we are already on a rewrite of this and will back this with a workflow so it will be much easier to work around such broken implementations. best regards Oliver
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
