<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">What about Vault [1]?<div class=""><br class=""></div><div class="">[1] <a href="https://www.vaultproject.io/" class="">https://www.vaultproject.io/</a></div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 14 Jun 2018, at 16:31, Markus P. Beckhaus <<a href="mailto:markus@beckhaus.com" class="">markus@beckhaus.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Tobias, Jason,<br class=""><br class=""><br class=""><br class="">thanks for your fast reply and precise explanation. Unfortunately, AD CS does not provide CMP or EST and given that SCEP originally only supported RSA I doubt that the AD CS NDES (SCEP) supports ECDSA anyway.<br class=""><br class=""><br class=""><br class="">We will have to look for a different way to mass deploy (and renew) certificates, maybe the AD CS Certificate Enrollment Webservices.<br class=""><br class=""><br class=""><br class="">Best Regards<br class=""><br class=""><br class=""><br class="">Markus <br class=""><br class=""><br class=""><br class=""><br class=""><br class="">Am 13.06.18, 17:03 schrieb "Users im Auftrag von Tobias Brunner" <<a href="mailto:users-bounces@lists.strongswan.org" class="">users-bounces@lists.strongswan.org</a> im Auftrag von <a href="mailto:tobias@strongswan.org" class="">tobias@strongswan.org</a>>:<br class=""><br class=""><br class=""><br class=""> Hi,<br class=""><br class=""><br class=""><br class=""><blockquote type="cite" class="">The SCEP protocol doesn't support elliptic curve algorithms — It's RSA-only.<br class=""></blockquote><br class=""><br class=""><br class=""> Just for reference, SCEP, as defined in the latest version of the draft,<br class=""><br class=""> doesn't seem have that limitation anymore [1]. (strongSwan's scepclient<br class=""><br class=""> is, of course, based on version 11 of the old draft, so...)<br class=""><br class=""><br class=""><br class=""> Regards,<br class=""><br class=""> Tobias<br class=""><br class=""><br class=""><br class=""> [1] <a href="https://tools.ietf.org/html/draft-gutmann-scep-10#section-3.1" class="">https://tools.ietf.org/html/draft-gutmann-scep-10#section-3.1</a><br class=""><br class=""><br class=""><br class=""><br class=""></div></div></blockquote></div><br class=""></div></body></html>