micromdm / scep

Go SCEP server
MIT License
323 stars 124 forks source link

SCEP Client: Handle PENDING responses by sending CertPoll #171

Open omorsi opened 3 years ago

omorsi commented 3 years ago

Currently the client implementation handles PENDING responses by waiting for 30 seconds and then sending a PKCSReq again. Instead, the client should be sending CertPoll requests [*].

https://github.com/micromdm/scep/blob/fa847cef3c453edee9fd4a519defa2befb94b676/cmd/scepclient/scepclient.go#L191

[*] https://tools.ietf.org/id/draft-gutmann-scep-16.html#section-3.3.3