Hi Ryan,

Although this link provides info and examples for CMC features implemented >= 10.4, I think the agent-signed CMC part stays more or less the same

http://www.dogtagpki.org/wiki/PKI_10.4_CMC_Feature_Update_(RFC5272)


Agent-signed request example can be found here.  The link to HttpClient_role_crmf.cfg should give you a working example of HttpClient cfg file:

http://www.dogtagpki.org/wiki/PKI_10.4_CMC_Feature_Update_(RFC5272)#Agent-signed_CMC_requests_Example

Hope this helps,
Christina


On 06/19/2018 07:27 AM, Ryan Christopher Devlin wrote:

Fraser,


Thank you for the reply. In that case I will most likely be sticking with Dogtag 9.


On a related note, I was wondering if you would be able to help me with a different question in regards to Dogtag 9. The implementation I'm currently building involves automating Dogtag, which requires that I control Dogtag entirely from the command line instead of the Firefox GUI. The issue I'm having is that the HttpClient command returns a response that consists of an html page displaying a 404 error. Based on the response I'm assuming this is signaling that I'm using the wrong URI in the HttpClient.cfg file I made. The current URI I'm using is "servlet=/ca/ee/ca/profileSelect?profileId=caCMCUserCert". I believe this is leading to a resource that doesn't exist, but I cannot find the correct URI listed anywhere. Would you happen to know a better option to use for "servlet="?  Thanks.


Sincerely,


Ryan

From: Fraser Tweedale <ftweedal@redhat.com>
Sent: Monday, June 18, 2018 10:55:30 PM
To: Ryan Christopher Devlin
Cc: pki-users@redhat.com
Subject: Re: [Pki-users] RHEL 6.7 Support
 
On Mon, Jun 18, 2018 at 02:45:41PM +0000, Ryan Christopher Devlin
wrote:
> Hi Everyone,
>
>
> I know Dogtag 9 runs in RHEL 6.x, but I'm unclear as to whether
> Dogtag 10 will work in that environment as well. We're looking to
> use the latest version of Dogtag, but we are constrained to RHEL
> 6.7 as the OS. Does anyone know if this is possible?

Hi Ryan,

It's theoretically possible, but there are no builds available, and
there will be a bunch of missing or too old dependencies, too.  You
can try, but you're basically on your own in terms of building and
deploying it.

Regards,
Fraser


_______________________________________________
Pki-users mailing list
Pki-users@redhat.com
https://www.redhat.com/mailman/listinfo/pki-users