Re: Cisco and automatic renewal (signature with old certificate)

[Alexander Klink <ak-ml2006@xxxxxxxxx>]

Hi again,

On Fri, May 09, 2008 at 10:31:50AM +0200, Alexander Klink wrote:
> > Are you returning "Renewal" in the GetCACaps SCEP response?
> 
> Unfortunately, we didn't implement GetCACaps (yet) - would that change
> anything?

I just checked my Apache logs and the device we're trying this on
(a Cisco 7300 running IOS 12.2(31)SB11) apparently does not send
GetCACaps (we updated it during the testing process, though, so
maybe it only asks during the trustpoint configuration?) ... - any
ideas?

Cheers,
  Alex
-- 
Dipl.-Math. Alexander Klink | IT-Security Engineer |    a.klink@xxxxxxxxx
 mobile: +49 (0)178 2121703 |          Cynops GmbH | http://www.cynops.de
----------------------------+----------------------+---------------------
      HRB 7833, Amtsgericht | USt-Id: DE 213094986 |     Geschäftsführer:
     Bad Homburg v. d. Höhe |                      |      Martin Bartosch