certmonger supports SCEP
The *certmonger* service has been updated to support the Simple Certificate Enrollment Protocol (SCEP). For obtaining certificates from servers, you can now offer enrollment over SCEP.
Description of problem:
Customer is asking for a method to implement auto-enrollment of certificates from Microsoft PKI in RHEL6 systems. As the information provided the optimal way is to implement SCEP protocol client in certmonger however other alternatives may be valid if available.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
We have evaluated this request and at this time we have chosen to defer action. We will consider this request in a future version of the product.
0.77.1 implements the later drafts well enough to succeed when pointed at my test environment (WS 2012 R2, lone server in a lone forest), but is not confirmed to work properly with anything else yet.
Automated test cases executed against build certmonger.x86_64 0:0.77.5-1.el6, no regression found.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.