scep issues

Allow caller to set handler path on scepserver.MakeHTTPHandler

Hi folks. This change allows callers of `scepserver.MakeHTTPHandler` to choose/set the path for the SCEP service (other than `/scep`).

lucasmrod

Openssl revoke doesn't work with index.txt

2

Hello, me again. When I try to revoke a certificate using the generated index.txt, I get the following: ERROR:name does not match 0D Although the named certificate does exist in...

antwacky

ensure serial hex is written to index file consistently lower case

Certificate serial hex is lowercase, whereas currently the serial hex is written to the database in uppercase. Openssl doesn't like this when attempting to revoke a certificate, as the uppercase...

antwacky

Added KeyUsage `DigitalSignature` to CA certs.

1

`DigitalSignature` MUST be set in SCEP CA certificates according to RFC 8894: 2.1.2. Certificate Authority A SCEP CA is the entity that signs client certificates. A CA may enforce policies...

bkstein

Add support for PKCS8 key and non encrypted

This MR allow to use another packaging for keys.

jbpin

github.com/boltdb/bolt switch to github.com/etcd-io/bbolt?

1

Hi, If I am wrong please correct me. Is there we have plan to switch github.com/etcd-io/bbolt? because the bolt repo is a public archive and the bblot is active. Backgroup:...

yuzibo

Feature Request - Adding Key Attributes to CSR (SCEP Client)

3

Hello, I would like to ask if it is possible to add specific Key Usage and Extended Key Usage attributes to the CSR generated by the SCEP client. For example...

brokoler