Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for certificate renewal via SCEP #3413

Open
wants to merge 10 commits into
base: master
Choose a base branch
from
Open

Add support for certificate renewal via SCEP #3413

wants to merge 10 commits into from

Commits on Aug 29, 2020

  1. Add RenewalReq among supported CRSPKIMessage types

    @borama
    borama committed Aug 29, 2020
    Configuration menu
    Copy the full SHA
    dca8ccc View commit details
    Browse the repository at this point in the history

Commits on Nov 28, 2020

  1. Copy code to handleRenewalReq method

    @borama
    borama committed Nov 28, 2020
    Configuration menu
    Copy the full SHA
    bf5a0a2 View commit details
    Browse the repository at this point in the history

  2. Debug the incoming PKCS10 request

    @borama
    borama committed Nov 28, 2020
    Configuration menu
    Copy the full SHA
    153e265 View commit details
    Browse the repository at this point in the history

Commits on Nov 29, 2020

  1. Handle RenewalReq (17) message type in CRSEnrollment servlet

    @borama
    borama committed Nov 29, 2020
    Configuration menu
    Copy the full SHA
    64517ec View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2020

  1. Verify SCEP requests via PKCS7 verification

    @borama
    borama committed Dec 6, 2020
    Configuration menu
    Copy the full SHA
    0313dd3 View commit details
    Browse the repository at this point in the history

  2. Use digest algorithm from SignerInfo when verifying SCEP request

    @borama
    borama committed Dec 6, 2020
    Configuration menu
    Copy the full SHA
    72911de View commit details
    Browse the repository at this point in the history

  3. Authorize signer's cert - ensure it is our own cert

    @borama
    borama committed Dec 6, 2020
    Configuration menu
    Copy the full SHA
    f7737bf View commit details
    Browse the repository at this point in the history

Commits on Dec 9, 2020

  1. Add global switch to enable / disable RenewalReq

    @borama
    borama committed Dec 9, 2020
    Configuration menu
    Copy the full SHA
    1d1c2a3 View commit details
    Browse the repository at this point in the history

  2. Allow alternative RenewalReq 

    Also allow processing RenewalReq when the SCEP messageType is not 17 (RenewalReq) but 19 (PKCSReq) and the SCEP message is signed by a certificate issued by this CA.
    @borama
    borama committed Dec 9, 2020
    Configuration menu
    Copy the full SHA
    a34bc2a View commit details
    Browse the repository at this point in the history

  3. Update CS.cfg config for the RenewalReq switch

    @borama
    borama committed Dec 9, 2020
    Configuration menu
    Copy the full SHA
    a369b7f View commit details
    Browse the repository at this point in the history