MAN page from OpenSuSE perl-OpenXPKI-Core-0.9.1389-6.362.CS.i586.rpm

OpenXPKI::Service::SCEP::Command::PKIOperation

Section: User Contributed Perl Documentation (3)
Updated: 2008-09-30
Index

Name

Description

Implements the functionality required to answer SCEP PKIOperation messages.

Functions

execute

Parses the PKCS#7 container for the message type, calls a functiondepending on that type and returns the result, including the HTTPheader needed for the scep CGI script.

__pkcs_req

Called by execute if the message type is 'PKCSReq' (19). This is themessage type that is used when an SCEP client asks for a certificate.Named parameters are TOKEN and PKCS7, where token is a token from theOpenXPKI::Crypto::TokenManager of type 'SCEP'. PKCS7 is the PKCS#7 datareceived from the client. Using the crypto token, the transaction ID ofthe request is acquired. Using this transaction ID, a database lookup is done(using the server API search_workflow_instances function) to see whetherthere is already an existing workflow corresponding to the transaction ID.

If there is no workflow, a new one of type I18N_OPENXPKI_WF_TYPE_SCEP_REQUESTis created and the (base64-encoded) PKCS#7 request as well as the transactionID is saved in the workflow context. From there on, the work takes place inthe workflow.

If there is a workflow, the status of this workflow is looked up and the responsedepends on the status:
  - if the status is not 'SUCCESS' or 'FAILURE', the request is still
    pending, and a corresponding message is returned to the SCEP client.
  - if the status is 'SUCESS', the certificate is extracted from the
    workflow and returned to the SCEP client.
  - if the status is 'FAILURE', the failure code is extracted from the
    workflow and returned to the client

This document was created byman2html,using the manual pages.