<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt"><div class="" style="">Hi All,</div><div class="" style=""><br class="" style=""></div><div class="" style="background-color: transparent;">We are looking at using Doghat CA server with Cisco routers. I had a few questions on the support included in Doghat certificate system.</div><div class="" style="background-color: transparent;"><br class="" style=""></div><div class="" style="background-color: transparent;">I just started working on PKI, so please excuse if the questions are quite basic.</div><div class="" style="background-color: transparent;"><br class="" style=""></div><div class="" style="background-color: transparent;">1. The Doghat system is built on top of NSS (Network Security Services). Does it have any issues working with Cisco routers as clients using SCEP? Would there be any
OpenSSL and NSS interactions in this case?</div><div class="" style="background-color: transparent;"><br class="" style=""></div><div class="" style="background-color: transparent;">2. Does Doghat support <span class="" style="font-size: 10pt;">CA Certificate rollover? When CA certificate is about to expire, CA creates a shadow certificate. All the endpoints associated with that CA can then renew their ID certificates (this requires support for SCEP Messages such as </span><span class="" style="font-size: 10pt;">GetNextCACert, GetCACaps).</span></div><div class="" style="font-size: 10pt; background-color: transparent;"><span class="" style="font-size: 10pt;"><br class="" style=""></span></div><div class="" style="background-color: transparent;">Thanks in advance for your help!</div><div class="" style="background-color: transparent;">-Abha</div><div class="" style="background-color: transparent;"> </div><div class="" style=""><br class=""
style=""></div></div></body></html>