Hello All,
I have some problems using SCEP. After router receives the key and import a certificate from PKI Server, i could see log error told me the certificate could not be signed. The error is: received bad certificate: signer no matching 29. Before PKI, i saw the CA Certificate has downloaded from PKI. Anyone knows what happen with RouterOS with erro message above?
Before in GetCACert:
time=18:59:13 topics=certificate,debug
message=“got CA certificate: C=BR,O=XPTO do XPTO S.A.,OU=ICP-BR,CN=AC
XPTO do XPTO - REDES v1”
time=18:59:13 topics=certificate,debug
message=“got certificate: C=BR,O=BR,OU=Servidores,CN=pki.xpto.com.br”
After:
time=18:59:19 topics=certificate,error
message=“recieved bad certificate: signer not matching 29”
time=18:59:19 topics=certificate,error
message=" issuer: C=BR,O=XPTO do XPTO S.A.,OU=ICP-BR,CN=AC XPTO do
XPTO - REDES v1"
time=18:59:19 topics=certificate,error
message=" subject: C=BR,O=XPTO do XPTO S.A.,OU=ICP-BR,CN=AC XPTO do
XPTO - REDES v1"
time=18:59:19 topics=certificate,error
message=“scep client failure: requesting-certificate-failed”
Regards,
Rodrigo Passos