Re: [OpenXPKI-users] EST endpoints in case of multiple realms

[Oliver W. <ma...@ol...>]

Hi Harm,

welcome to the list ;)

The EST protocol supports so called "calabels" which end up in being 
added into the path as 
https://<host>/.well-known/est/<calabel>/simpleenroll and the name of 
this label matches what we call an "endpoint". So you have to create a 
copy of the est/default.conf file to est/<calabel>.conf and change the 
settings as required.

Oliver

On 07.06.23 13:51, Harm Verhagen wrote:
> Hi,
>
> (new to this list, first question)
>
> I have 2 realms, I want to have EST for both.
> How can I configure 2 EST endpoint urls, to distinguish between the 
> realms?
>
> With the default config I have only one endpoint 
> https://<host>/.well-known/est/simpleenroll that happens to land in 
> the 'first' realm in realms.yaml
>
> I checked the manual [1], but could not find this feature.
>
> Regards,
> Harm
>
> [1] https://openxpki.readthedocs.io/en/stable/subsystems/est.html#
>
>
>
> _______________________________________________
> OpenXPKI-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openxpki-users

-- 
Protect your environment -  close windows and adopt a penguin!