> The projects I looked at that have SCEP are openca, ejbca and openscep.  
> I also looked at Sun Certificate Server (now discontinued) and ended up 
> using Microsoft Certificate Services on Win2000.  RSA Keon CA supports 
> SCEP, but I'm not rich enough to buy it.
> 

I just remember that one problem withe openSCEP was that there
is an undocumented option which must be set to false because
for whatever reason the protocol changed. 

    checktransid={true | false}


Besides this, the protocol description itself demonstrates a very
interesting knowledge of HTTP. :-( 
The hard coded URL cgi-bin/pkiclient.exe is not the worst part. 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to