Hi there! We've solved the problem upgrading the OpenSSL to the latest version. Now everything is in order.
Christian, thanks for the help once more. Best whishes, --Daniel 2006/12/4, Daniel Marques <[EMAIL PROTECTED]>: > Hi Chirstian, > > many, many thanks for the help. Unfortunately, it didn't work. :-( > > We've tried to run the openca-sv manually (with a test file) and > that's what we got: > > [Info]: Input file intialized. > [Info]: Signaturefile initialized. > [Info]: Reading Certificate file. > [Info]: PKCS#7 object loaded. > [Info]: Data is ready for verification. > [Info]: Signature Informations (PKCS#7): > Segmentation fault > > Running the same command in a test machine (we're everything seems to > be in order and working just fine, and it's almost an image of the > other one) and returns as follows : > > # /usr/local/OpenCA-0.9.2.5/openca/bin/openca-sv > verify -verbose -cf > /usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/crypto/cacerts/cacert.pem -cd > /usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/crypto/chain -data > /usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/tmp/testeee/REQUEST/ARCHIVED/teste.txt > -in > /usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/tmp/testeee/REQUEST/ARCHIVED/teste.sig > [Info]: Input file intialized. > [Info]: Signaturefile initialized. > [Info]: Reading Certificate file. > [Info]: PKCS#7 object loaded. > [Info]: Data is ready for verification. > [Info]: Signature Informations (PKCS#7): > depth:1 serial:00 subject:CN=Certificate Issuer,OU=IC,O=Teste CA,C=BR > depth:0 serial:01 subject:serialNumber=1,CN=Usuário de > Teste,OU=IC,O=UFF,O=Teste CA,C=BR > [Info]: Signature is corrupt. Errorcode -1. > signature:error:-1 > [Error]: Digest mismatch. Signature is wrong. > > Again, thanks for the support. > > Best whishes, > --Daniel > > > > 2006/12/4, Christian <[EMAIL PROTECTED]>: > > Hi Daniel, > > > > please find out where your "openca-sv" binary resides (`which openca-sv` > > or `find / -name "openca-sv"`) > > then check result against > > "OpenCA-DIR/etc/config.xml" > > > > should look like this > > <option> > > <name>USE_LOAS</name> > > <value>yes</value> > > </option> > > <option> > > <name>prefix</name> > > <value>/usr/share</value> > > </option> > > <option> > > <name>bindir</name> > > <value>/usr/bin</value> > > </option> > > > > If you want to have "openca-sv" in /usr/bin. > > normally it resides in PREFIX/bin > > > > "OpenCA-DIR/etc/token.xml" > > "OpenCA-DIR/etc/servers/node.conf" > > > > stop your server. > > fix mentioned files > > run configure_etc.sh again > > start your server again. > > > > should work, if not, come back ;) > > > > Best regards > > Christian > > > > Daniel Marques schrieb: > > > Dear friends, > > > > > > We're experiencing problems in the CA while importing RA request > > > certificates. The RA signature seems to be not recognized by the CA, > > > but all the other features works just fine. > > > > > > The error message informed by OpenCA is the following: > > > > > > http://www.ic.uff.br/~jacques/erro.jpg > > > > > > This message appears when we try to access a request by Information > > > > Certification Request > Approved and check the RA Operator's > > > signature. > > > > > > The RA Operator certificate was issued by the CA without any problems. > > > > > > Any hints? > > > > > > Thanks, > > > --Daniel > > > > > > ------------------------------------------------------------------------- > > > Take Surveys. Earn Cash. Influence the Future of IT > > > Join SourceForge.net's Techsay panel and you'll get the chance to share > > > your > > > opinions on IT & business topics through brief surveys - and earn cash > > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > > _______________________________________________ > > > Openca-Users mailing list > > > [email protected] > > > https://lists.sourceforge.net/lists/listinfo/openca-users > > > > > > > ------------------------------------------------------------------------- > > Take Surveys. Earn Cash. Influence the Future of IT > > Join SourceForge.net's Techsay panel and you'll get the chance to share your > > opinions on IT & business topics through brief surveys - and earn cash > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > _______________________________________________ > > Openca-Users mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/openca-users > > > -- Daniel Marques Computers Science UFF - Universidade Federal Fluminense Niteroi - Rio de Janeiro - Brazil ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
