Comments (3)
Hello! That's interesting. Are you able to change the encryption algorithm that the SRX uses to talk to SCEP in any way? What does Juniper have to say about this issue?
from scep.
I'm not sure exactly which part the SCEP server can't decrypt, but what the Juniper SRX has for options -
Digest:
> request security pki local-certificate enroll digest ?
Possible completions:
sha-1 SHA-1 digests (default value)
sha-256 SHA-256 digests
SCEP Digest:
> request security pki local-certificate enroll scep-digest-algorithm ?
Possible completions:
md5 MD-5 digest
sha1 SHA-1 digest (default)
SCEP Encryption:
> request security pki local-certificate enroll scep-encryption-algorithm ?
Possible completions:
des DES Encryption
des3 DES-3 Encryption (default)
Plus the key that it's using is an RSA key that's in DER format.
I've got a support ticket open with Juniper but they hasn't led anywhere so far.
from scep.
I was hoping to do the same, but it looks like it's not configurable on the SRX.
SCEP sends a PKCS #10 format certificate request enveloped in the PKCS #7 format.
from scep.
Related Issues (20)
- Building on Ubuntu and running on Docker Alpine results in "no such file or directory" HOT 3
- Revocation Endpoint HOT 2
- Feature Request - Adding Key Attributes to CSR (SCEP Client) HOT 1
- github.com/boltdb/bolt switch to github.com/etcd-io/bbolt? HOT 1
- Openssl revoke doesn't work with index.txt HOT 2
- Is it possible to configure SCEP to get certificate from Let's Encrypt? HOT 2
- docker server not start with PKCS#8 key HOT 1
- TestGenerateSubjectKeyID fails HOT 1
- Official Release? HOT 1
- Enrollment from CISCO Router HOT 6
- Implementing PKCS11 HOT 2
- DES default
- Proxy Implementation HOT 2
- Custom SCEP Client works for NDES, not GO SCEP Server HOT 18
- Compatibility with OpenXPKI HOT 1
- support SM2 ? HOT 4
- Include challenge password into CSR HOT 1
- Unable to enroll second device after enrolling one device (with nanomdm) HOT 5
- SCEP Server Error : "failed to sign CSR" HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scep.