Expand description
POST /.well-known/est/fullcmc — Full CMC Request.
RFC 7030 §4.3: EST clients submit a Full CMC request (PKCS#7 SignedData containing a CMC PKIData) for complex enrollment scenarios that require RA intermediation.
The signer of the CMC request MUST hold the id-kp-cmcRA EKU (OID 1.3.6.1.5.5.7.3.28) per RHELBU-3536 R15.
The server parses the CMC PKIData, extracts certification requests, issues certificates for each one (or proxies to Dogtag if configured), and returns a CMC PKIResponse.
Functions§
- post_
fullcmc POST /.well-known/est/fullcmc