smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
https://smallstep.com/certificates
Apache License 2.0
6.67k stars 433 forks source link

Fix the `id-scep-failInfoText` OID #1794

Closed hslatman closed 5 months ago

hslatman commented 5 months ago

See https://www.rfc-editor.org/rfc/rfc8894.html#section-6 and http://oid-info.com/get/1.3.6.1.5.5.7.24.1

When reporting an error message to the client as part of the SCEP protocol, the client will look for this OID to print the error text. Currently it would only print the the failInfo correctly (e.g. 2 for a bad request), but not the actual error message that we send.