Anyone have any experience using OpenSSL to do SCEP?
(Simple Certificate Enrollment Protocol)
Primarily I'm trying to decode these SCEP messages
from a Cisco Box so I can write the proper PERL
scripts to respond.
Thanks,
- John Dou
John,
attached is my expierence... and a first test-script. I would love to
see some open source implementation of SCEP and even are willing to
provide some funds to get this done...
regards,
Janus Liebregts
SURFnet
John Douglass wrote:
>
> Anyone have any experience using OpenSSL to d
Hi all,
Iam trying to implement the SCEP client
protocol. I would like to test it against a known server. Can any
one help me where I can find a server with which I can test my client
implementation.
Any directions and help is very much
appreciated...
Regards
Suram
Hello everyone,
thanks to OpenSSL, I was able to hack up something that looks
like an implementation of the simple certificate enrollment pro-
tocol SCEP. If you are interested in helping to debug the beast,
please have a look at http://openscep.othello.ch. So far, I've
been ab
This message was rejected by the mail hub at The University of
Birmingham (bham.ac.uk) because it has an apparently
executable attachment "pkiclient.exe".
The email rejected was not delivered to the following
recipients: [EMAIL PROTECTED]
Executabl
Dear firewall,
it's just a perl-script using the .exe extension required by SCEP!
open in in you favorite (text)-editor.
regards,
janus
Mail Delivery System wrote:
>
> This message was rejected by the mail hub at The University of
> Birmingham (bham.ac.uk) bec
Janus Liebregts wrote:
> it's just a perl-script using the .exe extension required by SCEP!
> open in in you favorite (text)-editor.
1) Don't send executable attachments. Perl scripts are, to
the best of my recollection, human readable...
2) The list s
chio wrote:
> Janus Liebregts wrote:
>
> > it's just a perl-script using the .exe extension required by SCEP!
> > open in in you favorite (text)-editor.
>
> 1)Don't send executable attachments. Perl scripts are, to
> the best of my recollection
Hi all,
I need guidance in understanding as to how SCEP server can be used & integrated
with OpenSSL.
My understanding is that SCEP can be used to enroll devices & then it
communicates to Certificate Authority that generate certificates.
Can some one point me in right direction ? Basica
If it fits your needs, you may want to look into using EST (RFC 7030)
instead of SCEP. EST is the replacement for SCEP. The SCEP draft was
never ratified. The libest open source project implements RFC 7030 and
uses OpenSSL. It's available at https://github.com/cisco/libest.
On 03/17/20
Hi All,
I am unable to identify the certificate format that I received during SCEP
enrollment. I am attaching a copy of the cert chain that I received. Can
someone please let me know how to convert the above attached certificate to PEM
format?
Santhosh
ca_ra_cert.bin
Description
ived during SCEP
> enrollment. I am attaching a copy of the cert chain that I received. Can
> someone please let me know how to convert the above attached certificate to
> PEM format?
> Santhosh
___
at 07:54:00PM +, Santhosh Kokala wrote:
> > Hi All,
> > I am unable to identify the certificate format that I
> received during SCEP enrollment. I am attaching a copy of the
> cert chain that I received. Can someone please let me know
> how to convert the above attached certi
On Wed, Feb 20, 2013 at 06:51:12PM -0500, Dave Thompson wrote:
> Or openssl asn1parse, likely available to anyone asking here
> even on non-Linux; with -inform der if applicable which it is
> here (easily determinable with any kind of octal or hex dump
> or a good guess for anything that doesn't
: Wednesday, February 20, 2013 3:51 PM
To: openssl-users@openssl.org
Subject: RE: application/x-x509-ca-ra-cert (SCEP Enrollment)
> From: owner-openssl-us...@openssl.org On Behalf Of Matthew Hall
> Sent: Wednesday, 20 February, 2013 15:05
> Use the dumpasn1 utility on it, it's in almo
> From: owner-openssl-us...@openssl.org On Behalf Of Santhosh Kokala
> Sent: Wednesday, 20 February, 2013 19:33
> I get this error when I try to convert it to PEM format.
>
>
> [~]$ openssl pkcs7 -in ca_ra_cert.bin -print_certs
> unable to load PKCS7 object
> 140065214732104:error:0906D06C:PEM
Hi Dave,
any progress on your SCEP- project? I am also planning to implement SCEP
using OpenSSL and do not want ro re-invent the wheel ;-)
regards,
janus
dave madden wrote:
>
> Hi.
>
> I'm trying to use OpenSSL to create certificates for a Cisco PIX
> firewall/vpn box
built-in support for SCEP is further down the track)
Anyway, it doesn't support SCEP and I am trying to see if I can
implement it myself. I have got a scep client to create a PKCS#7
container submission, upload it to my "stub" SCEP CGI, and can get
interesting details out via
openss
18 matches
Mail list logo
