GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  OPENXPKI::SERVER::WORKFLOW::ACTIVITY::SCEPV2::EVALUATECHALLENGE (3)

.ds Aq ’

Name

OpenXPKI::Server::Workflow::Activity::SCEPv2::EvaluateChallenge

CONTENTS

Description

Check the validity of the challenge password. Obtains the configuration from the scep server config, runs in two modes.

    bind

If you want to check the password against without revealing information about it, use mode: bind.



  challenge:
    mode: bind
    value@: connector:scep.connectors.challenge
      args:
      - "[% context.cert_subject %]"



This will call the given connector with the cert_subject as path argument, the password is passed as parameter using the key password, therefore you need to use a a special connector that can consume this extra section. The return value is evaluated in boolean context.

    comparison

Fetch the password from the given source and compare it against the given challenge. Supports only plain text password yet. Example for a mac address based challenge source (mac is passed using the url param feature).



  challenge:
    value@: connector:scep.connectors.challenge
      args:
      - "[% context.url_mac %]"



This will use the value returned from the connector at scep.connectors.challenge.00:11:22:33:44:55.

If you have a static password for all requests, use:



  challenge:
    value: mypassword



Search for    or go to Top of page |  Section 3 |  Main Index


perl v5.20.3 OPENXPKI::SERVER::WORKFLOW::ACTIVITY::SCEPV2::EVALUATECHALLENGE (3) 2016-04-03

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.