Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

How to configure CA to accept PKCS#10 requests

$
0
0

... or how to send the request correctly to CA?

I'm receiving PKCS#10 request from Windows Phone and forwarding it to our Windows 2008 maschine that contains CA.
In my PHP code I use CURL to call:

...mscep.dll?operation=PKIOperation&Message=".urlencode($cert_req);

I was told that in CA they see the error: "request did not contain a certificate template extension or the CertificateTemplate request attribute". I get back from the request an empty container (ca 500 bytes).

Can anyone point me to some obvious mistake I'm making?

Cert request looks like:   
0:d=0  hl=4 l= 625 cons: SEQUENCE             
4:d=1  hl=4 l= 349 cons: SEQUENCE             
8:d=2  hl=2 l=   1 prim: INTEGER           :00  
11:d=2  hl=2 l=  48 cons: SEQUENCE            
13:d=3  hl=2 l=  46 cons: SET                 
15:d=4  hl=2 l=  44 cons: SEQUENCE            
17:d=5  hl=2 l=   3 prim: OBJECT            :commonName  
22:d=5  hl=2 l=  37 prim: PRINTABLESTRING   :XXXXCD0-1624-5XXB-8E54-XXXXXXD3A1  
61:d=2  hl=4 l= 290 cons: SEQUENCE            
65:d=3  hl=2 l=  13 cons: SEQUENCE            
67:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption  
78:d=4  hl=2 l=   0 prim: NULL                
80:d=3  hl=4 l= 271 prim: BIT STRING         
355:d=2  hl=2 l=   0 cons: cont [ 0 ]         
357:d=1  hl=2 l=   9 cons: SEQUENCE           
359:d=2  hl=2 l=   5 prim: OBJECT            :sha1WithRSA 
366:d=2  hl=2 l=   0 prim: NULL               
368:d=1  hl=4 l= 257 prim: BIT STRING  




Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>