NAME

     scepd - handle SCEP request

SYNOPSIS

     scepd [ -d ] [ -fconfigfile ]

DESCRIPTION

     Scepd is usually called from a CGI script and is designed to
     read  a base64 encoded SCEP request from standard input.  It
     will analyze the request and store it in the pending  direc-
     tory  of  the OpenSCEP CA directory hierarchy.  If automatic
     enrollment is enabled, the challenge password of the request
     will be checked against the LDAP directory and automatically
     granted if the password matches. Otherwise  the  request  is
     left  in  the  pending  queue until the CA operator uses the
     scepgrant script to create the certificate, or  the  scepre-
     ject script to deny the certificate.

OPTIONS

     -d   increase the debug level by one.

     -fconfigfile
          use the  alternate  configuration  file  configfile  in
          place     of     the    default    /usr/local/openscep-
          0.3.8/openscep.cnf.

FILES

     By     default,     scepd     takes     /usr/local/openscep-
     0.3.8/openscep.cnf  as  configuration  file. If debugging is
     enabled,  and  the   directory   /var/tmp/openscep   exists,
     requests and the various stages of enveloped and signed data
     are written to files in that  directory.  Using  derdump(1),
     the parts can be individually analyzed, which can be helpful
     when debugging SCEP problems.

VERSION

     This page documents scepd as it appears in version 0.3.8  of
     OpenSCEP.

SEE ALSO

     scepgrant(8), scepreject(8), openscep.cnf(5)

AUTHOR

     Andreas F. Mueller <andreas.mueller@othello.ch>