iOS & OSX per SCEP nur von extern und ohne https möglich

rrr · Beitrag von **rrr** » 09 Sep 2015, 07:33

Hat bereits jemand einen iOS oder OSX-Client per SCEP in einer CA auf einem Lancom eingebunden?
Bei mir funktioniert es nur wenn ich den Vorgang von extern (ausserhalb des Lancom-Routers) und ohne https (also http://ROUTER-IP/cgi-bin/pkiclient.exe) anstosse.

Ansonsten meldet der LCOS-Trace: "handleScepMessage: type is unknown. Message ignored"

Code: Alles auswählen

[SCEP-CA] 2015/09/09 07:26:29,023  Devicetime: 2015/09/09 07:26:28,817
processScep: forwarding message to CA

[SCEP-CA] 2015/09/09 07:26:29,023  Devicetime: 2015/09/09 07:26:28,969
handleScepMessage: received message, check if it needs to be decoded...

[SCEP-CA] 2015/09/09 07:26:29,023  Devicetime: 2015/09/09 07:26:28,969
handleScepMessage: type is GetCACert

[SCEP-CA] 2015/09/09 07:26:29,023  Devicetime: 2015/09/09 07:26:28,969
handleGetCACert: Added CA/RA certificate to PKCS7 file.

[SCEP-CA] 2015/09/09 07:26:29,023  Devicetime: 2015/09/09 07:26:28,969
handleGetCACert: PKCS7 file was sent.

[SCEP-CA] 2015/09/09 07:26:29,242  Devicetime: 2015/09/09 07:26:29,060
processScep: forwarding message to CA

[SCEP-CA] 2015/09/09 07:26:29,242  Devicetime: 2015/09/09 07:26:29,211
handleScepMessage: received message, check if it needs to be decoded...

[SCEP-CA] 2015/09/09 07:26:29,242  Devicetime: 2015/09/09 07:26:29,211
handleScepMessage: type is unknown. Message ignored.

[SCEP-CA] 2015/09/09 07:26:29,242  Devicetime: 2015/09/09 07:26:29,233
processScep: forwarding message to CA

[SCEP-CA] 2015/09/09 07:26:29,460  Devicetime: 2015/09/09 07:26:29,384
handleScepMessage: received message, check if it needs to be decoded...

[SCEP-CA] 2015/09/09 07:26:29,460  Devicetime: 2015/09/09 07:26:29,384
handleScepMessage: type is unknown. Message ignored.

[SCEP-CA] 2015/09/09 07:26:29,663  Devicetime: 2015/09/09 07:26:29,477
processScep: forwarding message to CA

[SCEP-CA] 2015/09/09 07:26:29,663  Devicetime: 2015/09/09 07:26:29,627
handleScepMessage: received message, check if it needs to be decoded...

[SCEP-CA] 2015/09/09 07:26:29,663  Devicetime: 2015/09/09 07:26:29,627
handleScepMessage: type is unknown. Message ignored.