> > P.S. I remember me that you tried 0.9. Did you have serious problems > with the snapshots? We are now in the bugfixing phase before the release > of 0.9. Perhaps it will be a DBI only release because I get no reports > from OpenCA::DB users.
I installed SNAP-20020123 . <RA CONFIGURATION> OpenCA (RA Server Version 0.9.9a) ---------------------------------------------------------------------------- ---- Module Version OpenSSL 0.9.16a Tools 0.4.3a DB DBI 0.9.35a Configuration 1.5.2a TRIStateCGI 1.5.4 REQ 0.7.58 X509 0.9.4a CRL 0.7.61 PKCS7 0.4.21a </RA CONFIGURATION> There are several problems which I have encountered. I hope that reporting them helps to get them fixed! Let me know what I can do to provide more detailed information about the errors. One thing that would be nice would be to enable DEBUG in the RA server, like there is in the CA server. 1. Most important. I still cannot sign requests as the RA. I have tried several strategies for doing so. ERROR: Sign is needed to Proceed LOCATION: RA Server - Certificate Requests - RA Choice - Pending Requests - Certificate Request - Approve Request (and Public server -- Test certificate) I am in the processes of signing a certificate using OpenSSL on the command line so that I can test the problem further. I dumped the request from the mysql database to a text file to be able to manipulate it. But, I wonder if there isn't a better way to solve this 'chicken and egg' problem of the RA not recognizing the root CA for certificate requests that are intended to be signing requests. I guess the other way around this is to turn off the signing requirement for the RA. How do I do this? The other issue which may be causing this problem is that I am NOT running an OpenLDAP server. And I have not yet been able to successfully connect OpenCA to the iPlanet LDAP Server. 2. Cannot issue certificate from CA. ERROR: Valid CA Secret Key Password not accepted. LOCATION: CA - Information - Certificate Requests - Pending Requests - Certificate Request - Waiting for Approval - Issue Certificate This is another way I though to circumvent the RA 'Sign is needed to proceed' error. But it doesn't work either. 3. Cannot request a certificate using Internet Explorer. ERROR: Javascript - Line: 91 Object: Expected Code: 0 URL: http://pca.tcs.tulane.edu/cgi-public/pki?cmd-ie_req LOCATION: Public Server - Request a Certificate - IE Request - IE Certificate Request - IE Certificate Confirm As always, thanks for the support and dedication to this very important project! Chris _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
