search

smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
https://smallstep.com/certificates
Apache License 2.0
6.7k stars 434 forks source link

Feature Request: SCEP Support? #14

Closed deknos closed 3 years ago

deknos commented 5 years ago

Subject of the issue

Hi, do you plan to support SCEP (https://tools.ietf.org/html/draft-nourse-scep-23) in your Client tool and server? I couldn't find it in your repository. It would be tremendously useful. If you support it in your client, it would help adoption and migration rate, i bet :)

maraino commented 3 years ago

Initial SCEP support has been merged to master. Thanks @hslatman https://github.com/smallstep/certificates/pull/506

deknos commented 3 years ago

atm i do not see any documentation for scep? will there be a tutorial? @maraino @hslatman ?

hslatman commented 3 years ago

Hi @deknos,

I will discuss this with @maraino and the rest of the step team.

In the meantime you can have a look at this comment on the PR. It's the setup that I used to implement and test the implementation with some SCEP clients. You'll probably need to adapt it to your setup. The other comments in the PR may also give you some hints as to how to configure SCEP.

Note that SCEP clients may expect certain behavior from a CA which may not have been implemented as such in step at this time. Let me know if you find issues.

brotherdust commented 3 years ago

Ok. I finally got step-ca into production and working. I'm going to try SCEP shortly.