Content-Type: application/x-x509-ca-ra-cert
Apr 26 16:31:49.924: CRYPTO_PKI: status = 0: failed to select RA encrypt cert
Content type says there is a CA and a RA certificate, but there is a CA certificate only. Later that dump tells it cannot decrypt RA part, which is not enclosed (I think so...)
OpenCA is running with openssl 0.9.7c. Other functions of OpenCA are fully operable, certificates can be requested, approved and issued.
regards
thats exactly what i guessed in my message before ;o)
you should issue an extra (webserver) cert from the ca this you have to assign to the scep-interface through config.xml then run configure_etc.sh again
than the scep-interface should work - at least - have the right certs for operating - since you usaly don't want to use the ca cert and key directly for the scep-interface
i will take a look at the script which manages the calls to the scep-tool - to work with the ca stuff - it there are no separate interface-cert and -key
greetings dalini
------------------------------------------------------- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
