certmonger

#147 Add new option to allow overriding the detected SCEP CA chain
Merged by rcritten. Opened by rcritten.
rcritten/certmonger bz1808613  into  master

The -R option was doing double-duty for the SCEP CA.

  1. It was required if the SCEP URL used TLS
  2. It override the CA certificate downloaded from the SCEP server

If the chains were different then validating the SCEP responses would
fail.

https://bugzilla.redhat.com/show_bug.cgi?id=1808613

Pull-Request has been merged by rcritten
Metadata
None
No Tags
Changes Summary 4
+9 -5
file changed
src/certmonger-scep-submit.8.in
+8 -4
file changed
src/getcert-add-scep-ca.1.in
+5 -1
file changed
src/getcert.c
+6 -7
file changed
src/scep.c
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.