From 4f03c1b7dfc870aaa01cf516ab4927ac93684754 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 22 May 2020 12:58:44 -0400 Subject: [PATCH] Include &message=CA-IDENT with GetCACaps requests The guttman spec is quite unclear on this and in the GetCACaps section doesn't mention &message at all. It only appears in the generic GET requests section 4.1 The nourse spec is clearer and requires &message=CA-IDENT on GetCACaps requests. It sems safe to continue to exclude it from GetCACert requests. https://bugzilla.redhat.com/show_bug.cgi?id=1839181 https://pagure.io/certmonger/issue/103 --- src/scep.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/scep.c b/src/scep.c index 46ab149b..c043643d 100644 --- a/src/scep.c +++ b/src/scep.c @@ -369,7 +369,7 @@ main(int argc, const char **argv) break; case op_get_ca_caps: /* Only step: read capabilities for the daemon. */ - params = talloc_asprintf(ctx, "operation=" OP_GET_CA_CAPS); + params = talloc_asprintf(ctx, "operation=" OP_GET_CA_CAPS "&message=%s", id); break; case op_get_ca_certs: /* First step: get the root certificate. */ @@ -392,7 +392,7 @@ main(int argc, const char **argv) goto done; } /* First step: read capabilities for our use. */ - params = talloc_asprintf(ctx, "operation=" OP_GET_CA_CAPS); + params = talloc_asprintf(ctx, "operation=" OP_GET_CA_CAPS "&message=%s", id); } break; case op_pkcsreq: @@ -412,7 +412,7 @@ main(int argc, const char **argv) goto done; } /* First step: read capabilities for our use. */ - params = talloc_asprintf(ctx, "operation=" OP_GET_CA_CAPS); + params = talloc_asprintf(ctx, "operation=" OP_GET_CA_CAPS "&message=%s", id); } break; } -- 2.21.1