Re: [OpenXPKI-users] Cannot autorenew scep requested certificate

2022-02-15 Thread Martin Bartosch via OpenXPKI-users
Hi, > You're right, certmonger seems to keep the same private key for renewal. > So certmonger may not be usefull as I read in the getcert man : > > -r automatically renews the certificate when its expiration date is close if > the key pair already exists. This option is used by default. > > Ce

Re: [OpenXPKI-users] Cannot autorenew scep requested certificate

2022-02-15 Thread cwam--- via OpenXPKI-users
Hi Martin, You're right, certmonger seems to keep the same private key for renewal. So certmonger may not be usefull as I read in the getcert man : -r automatically renews the certificate when its expiration date is close if the key pair already exists. This option is used by default. Certmonge

Re: [OpenXPKI-users] Cannot autorenew scep requested certificate

2022-02-15 Thread Martin Bartosch via OpenXPKI-users
Hi, > I am stuck in testing autorenew of scep requested certificates. > > This is my initial enrollment with certmonger : > ``` > getcert request -c openxpki -f $certfolder/nginx2.crt -k > $keyfolder/nginx2.key -g 4096 -r -N cn=nginx2.domain.lan -v -w -L > SecretChallenge > ``` > > On client s