pki: Additional pki.scep options for strongswan.conf

This commit is contained in:
Andreas Steffen committed 2022-08-24 20:46:44 +02:00
1 parent 93f2901d1a
commit 122796df27
5 files changed
+45 -49

No files matched your search

+6
View File
@@ -1,6 +1,12 @@
pki.load =
Plugins to load in the pki tool.
pki.scep.http_bind
Source IP address to bind for HTTP operations.
pki.scep.http_timeout = 30s
Timeout for HTTP operations.
pki.scep.renewal_via_pkcs_req = no
Some SCEP servers (e.g. openxpki) are incorrectly doing certificate renewal
via messageType PKCSReq (19) instead of RenewalReq (17).