scepd(8)scepd(8)NAMEscepd - handle SCEP request
SYNOPSISscepd [ -d ] [ -fconfigfile ]
DESCRIPTION
Scepd is usually called from a CGI script and is designed to read a
base64 encoded SCEP request from standard input. It will analyze the
request and store it in the pending directory of the OpenSCEP CA direc‐
tory hierarchy. If automatic enrollment is enabled, the challenge
password of the request will be checked against the LDAP directory and
automatically granted if the password matches. Otherwise the request is
left in the pending queue until the CA operator uses the scepgrant
script to create the certificate, or the scepreject script to deny the
certificate.
OPTIONS-d increase the debug level by one.
-fconfigfile
use the alternate configuration file configfile in place of the
default /usr/local/etc/openscep/openscep.cnf.
FILES
By default, scepd takes /usr/local/etc/openscep/openscep.cnf as config‐
uration file. If debugging is enabled, and the directory /var/tmp/open‐
scep exists, requests and the various stages of enveloped and signed
data are written to files in that directory. Using derdump(1), the
parts can be individually analyzed, which can be helpful when debugging
SCEP problems.
VERSION
This page documents scepd as it appears in version 0.4.2 of OpenSCEP.
SEE ALSOscepgrant(8), scepreject(8), openscep.cnf(5)AUTHOR
Andreas F. Mueller <andreas.mueller@othello.ch>
OpenSCEP 02/19/16 scepd(8)
