|
From: Shoubhik B. <sb...@gm...> - 2016-07-04 11:43:12
|
In the following steps, could you please tell me if EJBCA 4_0_16 supports triple-DES for the 5th step? - Requester sends GetCACert message to SCEP URL - Either CA or RA responds with single DER-encoded X.509 certificate DER-encoded 'degenerate' PKCS#7 SignedData message with an X.509 certificate chain (CA -> RA) - Requester checks if CA certificate is trusted by prompting user with message digest of X.509 certificate - Requester constructs a PKCS#10 certificate signing request (CSR) - Requester constructs a PKCS#7 EnvelopedData object using the DER-encoded CSR and encrypts the envelope encryption key (DES or Triple-DES) using the message recipient's public key (either the CA, or an RA with a keyEncipherment KeyUsage extension) |