My company is migrating its CAs. Actually, it's Unicert CA using a UPI client. But in the future, they want a CA supporting CMP (it should be EJBCA, I'm actually testing this).
So I analyzed the CMP and CRMF protocols. I can see all the basic stuff like register, revoke, change key pair. But how to simply retrieve information? I mean, for example, how to get the already generated certificate if we know the serial number ?
The actual implementation we have can do it. BTW, it doesn't use CMP. But strictly using the CMP protocol, is it possible to do it ?
I can easily find workarounds here, but I'm trying to be as close as possible to the actual implementation we have.