SCEP Server Test Suite Data Sheet
Test Suite: SCEP Server Test Suite
Direction: Server
Simple Certificate Enrollment Protocol (SCEP) is a Public Key Infrastructure protocol for enrolling certificates in a controlled environment. SCEP is based on existing PKCS#7 and PKCS#10 standards, and uses HTTP for transporting protocol messages. A PKI client uses SCEP to request a certificate signing or certificate renewal from the Certification Authority (CA). SCEP can also be used to query existing certificates and certificate revocation lists. The SCEP Server test suite is designed for robustness testing of Certification Authority and Registration Authority (RA) implementations supporting SCEP protocol. The test suite acts as a malicious PKI client sending anomalous SCEP requests to CA, possibly via RA.
Used specifications
| Specification |
Title |
| draft-nourse-scep-23 |
Simple Certificate Enrollment Protocol |
Tool-specific information
| Tested messages |
Notes |
| GetCACert request |
Plaintextrequest for querying CA certificate |
| GetCACaps request |
Plaintext request for querying next CA capabilities |
| GetNextCACert request |
Plaintext request for querying next CA certificate |
| PKCSReq request |
PKI-operation for certificate signing request |
| GetCertInitial request |
Periodical PKI-operation in polling state when signing is pending |
| GetCert request |
PKI-operation for querying existing certificate from CA |
| GetCRL request |
PKI-operation for querying certificate revocation list from CA |
| Supported algorithms |
Purpose |
| RSA |
PKI-operations |
| Triple-DES |
Encryption |
| MD5 |
Digest |
| SHA-1, SHA-256 and SHA-512 |
Digest |