Re: Sign PIX certificate using OpenSSL CA

[Charles B Cranston]

Sorry for my ignorance, could you post a reference to SCEP?  What would
it take to manhandle a standard certificate into this format?  Or is it
a lot more difficult than that?
Jon Barber wrote:
[EMAIL PROTECTED] wrote:

I'm assuming you mean a Pix Firewall version 6.3.x. I don't think 
there is a
way to get a certificate onto a Pix, as the "ca" commands can only create
certificates.  

The only way to get a cert is via SCEP.  There are only a handful of CAs 
that support SCEP, and no open source ones that are ready for serious 
use, IMHO.

If anyone knows different, *please* let me know.  I spent 3 months 
trying out every CA I could get my hands on.

Regards,

Jon.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]


--
Charles B (Ben) Cranston
mailto: [EMAIL PROTECTED]
http://www.wam.umd.edu/~zben
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]