Nelson wrote:
Hi,
I'm evaluating OpenCA 0.9.2-RC4 and can complete the Phase I install, but in Phase II when I try to issue "First User" certificate, this error happens:
...
there is an old certificate but no .pem certificate, and all the symlinks are invalid...... I then copy the cacert.pem.24968_old to cacert.pem and try to generate the certificate, but this error happens....


8<------------------------------------------------------------------------
*General Error*. Cannot encrypt PIN-mail! Aborting!
OpenCA::OpenSSL returns errorcode 8012006 (OpenCA::OpenSSL::SMIME->encrypt: unknown problem encrypting (11). )..
8<------------------------------------------------------------------------


the cacert.pem certificate don't have the private key to sign..... is the plain ca certificate...
at this point i'm stoped.... some advice ??


TIA

PD: Test system:
Debian 3.0 sarge
Perl 5.8.3
OpenSSL 0.9.7d
OpenCA 0.9.2-rc4

There are two bugs - one from OpenSSL and one from OpenCA. First OpenCA 0.9.2 RC4 includes a bug in it's OpenCA::OpenSSL module. Please check the mailing list archives for the patch. We used the CA cert to encrypt an email to the user. This does not result in an error but the user cannot open the mail. Second OpenSSL 0.9.7d is buggy. The PKCS#7 code does not work. You need a patch from OpenSSL for 0.9.7d or you have to use 0.9.7c.


Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to