NAME

     scepd - handle SCEP request


SYNOPSIS

     scepd [ -d ] [ -fconfigfile ]


DESCRIPTION

     Scepd is usually called from a CGI script and is designed to
     read  a base64 encoded SCEP request from standard input.  It
     will analyze the request and store it in the pending  direc-
     tory  of  the OpenSCEP CA directory hierarchy.  If automatic
     enrollment is enabled, the challenge password of the request
     will be checked against the LDAP directory and automatically
     granted if the password matches. Otherwise  the  request  is
     left  in  the  pending  queue until the CA operator uses the
     scepgrant script to create the certificate, or  the  scepre-
     ject script to deny the certificate.



OPTIONS

     -d   increase the debug level by one.

     -fconfigfile
          use the  alternate  configuration  file  configfile  in
          place             of             the            default
          /usr/local/lib/openscep/openscep.cnf.



FILES

     By default, scepd takes /usr/local/lib/openscep/openscep.cnf
     as  configuration  file.  If  debugging  is enabled, and the
     directory /var/tmp/openscep exists, requests and the various
     stages  of enveloped and signed data are written to files in
     that directory. Using derdump(1), the parts can be individu-
     ally  analyzed,  which  can  be  helpful when debugging SCEP
     problems.



VERSION

     This page documents scepd as it appears in version 0.3.6  of
     OpenSCEP.



SEE ALSO

     scepgrant(8), scepreject(8), openscep.cnf(5)



AUTHOR

     Andreas F. Mueller <andreas.mueller@othello.ch>




Man(1) output converted with man2html