|
 |
7a8c6d |
From 8ee05aae1f0a85bcd763cde1dfcc8a33be85c35c Mon Sep 17 00:00:00 2001
|
|
|
7a8c6d |
From: Trevor Vaughan <tvaughan@onyxpoint.com>
|
|
|
7a8c6d |
Date: Wed, 11 Apr 2018 16:01:13 -0400
|
|
|
7a8c6d |
Subject: [PATCH 25/25] Add cipher and digest difference messages
|
|
|
7a8c6d |
|
|
|
7a8c6d |
Ensure that users know that AES is the cipher and SHA is the digest when
|
|
|
7a8c6d |
CA capabilities are not supported.
|
|
|
7a8c6d |
|
|
|
7a8c6d |
Ref #89
|
|
|
7a8c6d |
---
|
|
|
7a8c6d |
src/scepgen-o.c | 4 ++--
|
|
|
7a8c6d |
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
7a8c6d |
|
|
|
7a8c6d |
diff --git a/src/scepgen-o.c b/src/scepgen-o.c
|
|
|
7a8c6d |
index 05fc437..7120ade 100644
|
|
|
7a8c6d |
--- a/src/scepgen-o.c
|
|
|
7a8c6d |
+++ b/src/scepgen-o.c
|
|
|
7a8c6d |
@@ -503,7 +503,7 @@ cm_scepgen_o_cooked(struct cm_store_ca *ca, struct cm_store_entry *entry,
|
|
|
7a8c6d |
}
|
|
|
7a8c6d |
if (cipher == cm_prefs_nocipher) {
|
|
|
7a8c6d |
/* Per the latest Draft RFC */
|
|
|
7a8c6d |
- cm_log(1, "Could not determine supported CA capabilities, using AES256.\n");
|
|
|
7a8c6d |
+ cm_log(1, "Could not determine supported CA capabilities, using cipher AES256.\n");
|
|
|
7a8c6d |
cipher = cm_prefs_aes256;
|
|
|
7a8c6d |
}
|
|
|
7a8c6d |
}
|
|
|
7a8c6d |
@@ -580,7 +580,7 @@ cm_scepgen_o_cooked(struct cm_store_ca *ca, struct cm_store_entry *entry,
|
|
|
7a8c6d |
if (digest == cm_prefs_nodigest) {
|
|
|
7a8c6d |
/* Per SCEP RFC draft-gutmann-scep-10 - March 1, 2018 */
|
|
|
7a8c6d |
/* https://www.ietf.org/id/draft-gutmann-scep-10.txt */
|
|
|
7a8c6d |
- cm_log(1, "Could not determine supported CA capabilities, using SHA256.\n");
|
|
|
7a8c6d |
+ cm_log(1, "Could not determine supported CA capabilities, using digest SHA256.\n");
|
|
|
7a8c6d |
digest = cm_prefs_sha256;
|
|
|
7a8c6d |
}
|
|
|
7a8c6d |
}
|
|
|
7a8c6d |
--
|
|
|
7a8c6d |
1.8.3.1
|
|
|
7a8c6d |
|