Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
C Shell Java C++ Makefile
Branch: master

Merge pull request #31 from mdholaki/master

Client ensures identity cert matches trust anchor
latest commit 84d4b0adab
@rpb5bnc rpb5bnc authored
Failed to load latest commit information.
config Add subdirs automake option to silence warnings. Commit autogen updat…
example - Ensure that token is base64 encoded and decoded
java Add subdirs automake option to silence warnings. Commit autogen updat…
m4 Add subdirs automake option to silence warnings. Commit autogen updat…
src Client ensures identity cert matches the trust anchor
test Client ensures identity cert matches the trust anchor
AUTHORS Initial commit of EST protocol stack.
COPYING Initial commit of EST protocol stack.
ChangeLog Initial commit of EST protocol stack.
INSTALL Add support for --enable-jni option to build the native shim library …
LICENSE Initial commit of EST protocol stack.
Makefile.am Add support for --enable-jni option to build the native shim library …
Makefile.in Add subdirs automake option to silence warnings. Commit autogen updat…
NEWS Initial commit of EST protocol stack.
README Initial commit of EST protocol stack.
README.doxy Initial commit of EST protocol stack.
README.md Update README.md
aclocal.m4 Use latest autoconf to update configure script.
autogen.sh Initial commit of EST protocol stack.
configure Add subdirs automake option to silence warnings. Commit autogen updat…
configure.ac Add subdirs automake option to silence warnings. Commit autogen updat…
doxygen.cfg Initial commit of EST protocol stack.
intro.txt Initial commit of EST protocol stack.
version Spin the revision number since 1.1.0 is now released.
version.in Add support for --enable-jni option to build the native shim library …

README.md

This project is a library that implements RFC 7030 (Enrollment over Secure Transport). EST is used to provision certificates from a CA or RA. EST is a replacement for SCEP, providing several security enhancements and support for ECC certificates. Libest is written in C and uses OpenSSL 1.0.1. The following flows defined in RFC 7030 for both server and client operation have been implemented:

/getcacerts /csrattrs /simpleenroll /simplereenroll

Also of interest, a EST test server running this library has been setup at http://testrfc7030.cisco.com/ and can be used for interop testing the EST protocol.

Please direct questions/comments to est-interest@external.cisco.com

Something went wrong with that request. Please try again.