Re: [Ejbca-develop] HTTP 1.0 fails with Scep request (SOLVED!!)

[Tomas G. <to...@pr...>]

Very interesting! Thanks for the update.

Cheers,
Tomas

On 10/21/2013 02:20 PM, Peut Kotze wrote:
> Hi Tomas
> Just to let you know, I finally solved the "apparent" HTTP version problem.
> I have used Branko Majic's excellent guide to setup EJBCA. He uses CA
> names with spaces "Example Server CA" in his guide.
> I created a trustpoint in Cisco with the exact same CA name by using quotes:
> # crypto pki trustpoint "Example Server CA"
> # ...
> # ...
> # crypto pki authenticate "Example Server CA"
> However, when Cisco sends the SCEP request to authenticate the CA, the
> request on the wire is formatted as follows:
>
> .../scep/pkiclient.exe?operation=GetCACert&message=Example Server CA
> HTTP/1.0
>
> Upon which the EJBCA server sends back the reply:
>
> HTTP/1.1 505 HTTP Version Not Supported
>
> This is because EJBCA interpret the last part of the message as the HTTP
> protocol definition part: " Server CA HTTP/1.0".
> I dont' know if it is Cisco who is supposed to insert quotes in
> names containing spaces, or if it is the java connector the should read
> everything until it gets to the HTTP part.
> But my problem is solved, it is due to incompatibility when using CA
> names containing spaces between EJBCA and Cisco, I hace changed my CA
> authority names to single names not containing spaces and everything is
> working fine now.
> Thank you for your time and effort.
> Best regards
> Peut
> PS. Thanks to Murphy it happens to be that Cisco uses HTTP/1.0 in their
> requests, throwing me totally off track.
>
>
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>