what is the default password of the ca.key? about scep

[groob]

What kind of undefined behavior?

[FreshXOpenSource]

the CA should have no password if not defined

[groob]

This bit here

scep/depot/file/depot.go

Lines 372 to 376 in 864b3e4

	b, err := x509.DecryptPEMBlock(pemBlock, password)
	if err != nil {
	return nil, err
	}
	return x509.ParsePKCS1PrivateKey(b)

should be wrapped in an if password != "" statement.

Do you want to submit a patch?