Stack Overflow
Stack Overflow

Questions tagged [jscep]

Java implementation of the Simple Certificate Enrollment Protocol (SCEP).

11 questions
2
votes
0 answers

How to change Device Identity Certificate(SCEP certificate)'s expiration date in OS X Server App(for Profile Manager)

Now I'm trying to test "Update Profile" button(Settings > General > Profile > Device Management based on iOS 8.4) and whether update works well or not after Device Identity Certificate (SCEP certificate) was expired as below. Screenshot of Update…
Daenam Kim
  • 127
  • 6
1
vote
1 answer

JSCEP with X509Certificate and Attribute Certificate

I want to use JSCEP with Attribute Certificates (ACs), they are part of X.509. When I check the Java libraries. In the java.security.cert package a abstract X509Certificate is contained but this certificate inherits a getPublicKey method from…
wake-0
  • 3,918
  • 5
  • 28
  • 45
1
vote
0 answers

How to code in Java EnhancedKeyUsage when filling in a Certification Signing Request

I need to get an X509Certificate from a CA server I need to add some EnhancedKeyUsage extension such as "secureEmail" - "1.3.6.1.5.5.7.3.4" How do I add that to the certificate request? The following code runs, returns a certificate but without…
jkally
  • 794
  • 2
  • 9
  • 35
1
vote
0 answers

IOS8 SCEP enrollment fails on second install

The OTA Certificate enrollment process works on IOS7 devices as many times as needed. relevant IOS7 log for a second certificate installation based on the same config/ca/signing cert etc.: profiled[1397] : (Note ) MC: Retrieving profile…
tadukurow
  • 11
  • 2
0
votes
1 answer

JSCEP-Wrong 3rd argument type. Found: 'org.spongycastle.pkcs.PKCS10CertificationRequest', required: 'org.bouncycastle.pkcs.PKCS10CertificationRequest'

I'm implementing Jscep for android. Initially, I tried Jscep for java and it worked fine. Now in Android, I used SpongyCastle instead of BouncyCastle. Now my problem is that the enrol method of Client class is using BouncyCastle. And so when I try…
Saravana Kumar
  • 140
  • 2
  • 16
0
votes
1 answer

How do I get username and enrollment code for a fresh ejbca setup?

I am running EJBCA in virtualbox as mentioned at https://ejbca.org/download.html . When I try to "Create Browser Certificate" or "Create certificate from CSR", it is asking for Username and Enrollment code Where do I get the username and the…
user674669
  • 10,681
  • 15
  • 72
  • 105
0
votes
1 answer

OpenXPKI with JSCEP to request CRL

I am trying to obtain the CRL from an OpenXPKI server (the default configuration is used). Requesting and polling of a certificate is possible. On the OpenXPKI server, I revoked some certificate, created the CRL and published the list. To obtain the…
wake-0
  • 3,918
  • 5
  • 28
  • 45
0
votes
1 answer

How to include password when enrolling CSR to EJBCA using JSCEP

I am attempting to enroll a certificate signing request to EJBCA using JSCEP as documented here: https://github.com/jscep/jscep I am able to submit a csr from the web console using the same format of csr and private key (for ssl authorization on…
David Kinghorn
  • 161
  • 6
0
votes
0 answers

OS x device enroll to MDM using SCEP

I am able to enroll an OS x device to MDM without going through the scep. When I go through some documentation there are no any specific different between ios and os x enrollment via SCEP. But when I tried to enroll an OS x device using SCEP I got…
Tharinda Ehelepola
  • 59
  • 9
0
votes
1 answer

SCEP CertRep SUCCESS: how many certs are in the response?

I am working on an SCEP implementation (both requester and authority). The project uses JScep as a library. During the communication for a PKCSReq the client receives a CertRep SUCCESS. The draft says the following: …
csikos.balint
  • 1,107
  • 2
  • 10
  • 25
0
votes
2 answers

Bouncycastle provider and Java SUN provider interopability issue

I am using jscep in a mobile device management project. Jscep uses bouncy castle as the security provider and I have done the same in my project. I have created a few simple static methods to create certificates using BC. These have been tested and…
pablobill
  • 13
  • 1
  • 4