Hi list,
I was successfully testing OpenXPKI 3.14.4 (docker image) scep server and
certmonger 0.79.13 for certificate enroll and renewal.
I am now using OpenXPKI 3.20.0 (docker image) scep server and certmonger
0.79.13 for a POC in our environment. Certmonger does not obtain certificates
anymor
Hi,
Thanks Martin.
For those who would like to use certmonger to manage client side certificates,
I discovered that it is possible to renew the private key at each certificate
renewal with this configuration. This is compliant for OpenXPKI.
/etc/certmonger/certmonger.conf
[defaults]
max_key_use
Hi Martin,
You're right, certmonger seems to keep the same private key for renewal.
So certmonger may not be usefull as I read in the getcert man :
-r automatically renews the certificate when its expiration date is close if
the key pair already exists. This option is used by default.
Certmonge
Hi,
I am stuck in testing autorenew of scep requested certificates.
This is my initial enrollment with certmonger :
```
getcert request -c openxpki -f $certfolder/nginx2.crt -k $keyfolder/nginx2.key
-g 4096 -r -N cn=nginx2.domain.lan -v -w -L SecretChallenge
```
On client side, Certmonger is a
>
> Am 08.02.22 um 18:10 schrieb cwam--- via OpenXPKI-users:
>
>> Hi Oliver.
>>
>> According to the webUI and workflow.log, noworkflow is started.
>> I am requesting only one certificate (only one tryin the following
>> logs).
>> This
> crashes during startup. Can you please check if a workflow was created
> and/or for any other error messages before this log line in openxpki.log
>
> Oliver
>
> Am 07.02.22 um 16:29 schrieb cwam--- via OpenXPKI-users:
>
>> Hi,
>>
>> I meet difficulties
Hi,
I meet difficulties using "getcert request" (from certmonger).
# CLIENT SIDE
Here is how I am trying to get a certificate from OpenXPKI SCEP server from a
client :
$ getcert request -I obtenirUnCertificat -c openxpki -d /etc/pki/nssdb -n
scep-client-test -N cn="app.domain.lan"
$ getcert
