Hi Ryan, Although this link provides info and examples for CMC features implemented >= 10.4, I think the agent-signed CMC part stays more or less the same http://www.dogtagpki.org/wiki/PKI_10.4_CMC_Feature_Update_(RFC5272) Agent-signed request example can be found here. The link to HttpClient_role_crmf.cfg should give you a working example of HttpClient cfg file: http://www.dogtagpki.org/wiki/PKI_10.4_CMC_Feature_Update_(RFC5272)#Agent-si... Hope this helps, Christina On 06/19/2018 07:27 AM, Ryan Christopher Devlin wrote:
Fraser,
Thank you for the reply. In that case I will most likely be sticking with Dogtag 9.
On a related note, I was wondering if you would be able to help me with a different question in regards to Dogtag 9. The implementation I'm currently building involves automating Dogtag, which requires that I control Dogtag entirely from the command line instead of the Firefox GUI. The issue I'm having is that the HttpClient command returns a response that consists of an html page displaying a 404 error. Based on the response I'm assuming this is signaling that I'm using the wrong URI in the HttpClient.cfg file I made. The current URI I'm using is "servlet=/ca/ee/ca/profileSelect?profileId=caCMCUserCert". I believe this is leading to a resource that doesn't exist, but I cannot find the correct URI listed anywhere. Would you happen to know a better option to use for "servlet="? Thanks.
Sincerely,
Ryan
------------------------------------------------------------------------ *From:* Fraser Tweedale <ftweedal@redhat.com> *Sent:* Monday, June 18, 2018 10:55:30 PM *To:* Ryan Christopher Devlin *Cc:* pki-users@redhat.com *Subject:* Re: [Pki-users] RHEL 6.7 Support On Mon, Jun 18, 2018 at 02:45:41PM +0000, Ryan Christopher Devlin wrote:
Hi Everyone,
I know Dogtag 9 runs in RHEL 6.x, but I'm unclear as to whether Dogtag 10 will work in that environment as well. We're looking to use the latest version of Dogtag, but we are constrained to RHEL 6.7 as the OS. Does anyone know if this is possible?
Hi Ryan,
It's theoretically possible, but there are no builds available, and there will be a bunch of missing or too old dependencies, too. You can try, but you're basically on your own in terms of building and deploying it.
Regards, Fraser
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users