OpenXPKI Enrollment Interface

This is a certificate enrollment interface for OpenXPKI. Basically, it runs on a bastion host and accepts CSRs from external users. These CSRs are passed to an internal OpenXPKI daemon via SSCEP.

REQUIREMENTS

Authentication/Authorization

• The user is authenticated externally using ClearCase/WebSSO

URIs

• Accessing the URI '/' lists all possible operations
• POST to the URI '/upload' receives the CSR

SSCEP

• The call to SSCEP must be properly escaped to prevent tainted information