[Pki-users] SCEP enroll with works once

Marc Sauton msauton at redhat.com
Tue Oct 11 17:53:07 UTC 2016


On 10/07/2016 01:42 AM, Wojciech Kromer wrote:
> Hello.
>
> I'm just trying to make SCEP work on Fedora with dogtag.
> On client side I'm using sscep as described in doc.
>
> It work fine on very first enroll, but after this flatfile.txt
> changes from something like :
> UID:1.2.3.4
> PWD:secret
>
> into this:
> #UID:1.2.3.4
> #PWD:secret
>
>
> What's wrong?
This is working "by design", the credentials should not be left over for 
unlimited enrollment use, as this is supposed to be a "one-time pin", so 
they are commentified.
In fact they should even be completely removed for somehow better practice.
>
>
> WK
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users





More information about the Pki-users mailing list