{"action":"opened","issue":{"url":"https://api.github.com/repos/certnanny/sscep/issues/42","labels_url":"https://api.github.com/repos/certnanny/sscep/issues/42/labels{/name}","comments_url":"https://api.github.com/repos/certnanny/sscep/issues/42/comments","events_url":"https://api.github.com/repos/certnanny/sscep/issues/42/events","html_url":"https://github.com/certnanny/sscep/issues/42","id":57634038,"number":42,"title":"Recommend modification to sscep.c to support issuer CAs other than a self-signed Root CA.","user":{"login":"tedescn","id":10996727,"avatar_url":"https://avatars.githubusercontent.com/u/10996727?v=3","gravatar_id":"","url":"https://api.github.com/users/tedescn","html_url":"https://github.com/tedescn","followers_url":"https://api.github.com/users/tedescn/followers","following_url":"https://api.github.com/users/tedescn/following{/other_user}","gists_url":"https://api.github.com/users/tedescn/gists{/gist_id}","starred_url":"https://api.github.com/users/tedescn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tedescn/subscriptions","organizations_url":"https://api.github.com/users/tedescn/orgs","repos_url":"https://api.github.com/users/tedescn/repos","events_url":"https://api.github.com/users/tedescn/events{/privacy}","received_events_url":"https://api.github.com/users/tedescn/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-02-13T18:15:46Z","updated_at":"2015-02-13T18:15:46Z","closed_at":null,"body":"We have recently downloaded and compiled version 20081211 of sscep.c  In testing we note that it is configured to issues certificates from a self-signed Root CA rather than an intermediate Issuing CA.\r\n\r\nCan we recommend a change to the code base that will allow intermediate Issuing CAs to be supported?\r\n\r\nFor version 20081211 of sscep this would mean changing line 551 form “X509_get_issuer_name(cacert))) {“ to “X509_get_subject_name(cacert))) {“. \r\n\r\nNote we believe this to be a typo where issuer & subject names are identical values within a self-signed Root CA but would different values for an intermediate Issuing CA. \r\n"}}