Hi Sam, I don't have this problem when using the random serial numbers.. have you applied the patches for the 1.1.0 version available on the Wiki pages ?
Cheers, Max On 03/30/2010 09:40 AM, Samuel Hug wrote:
Hello there, during the setup of my first OpenCA environment, I've run into problems downloading the very first CA Operator Certificate. [Error 690 Configuration Error. Error 0, unable to get cert from dB! (Success (error 11111: Do not commit if the database or the module itself fails.)).] To me it looks like a bug related to the newly introduced random serial numbers (OpenCA release 1.1.0). The sql statements for selecting attributes from the certificate table are causing mysql to do implicit typecasting, and this obviously has it's limitations with decimals of that size. Example (my CA Operators Certificate serial 403586350459196298236820): mysql> select 403586350459196298236820='403586350459196298236820' \G *************************** 1. row *************************** 403586350459196298236820='403586350459196298236820': 0 1 row in set (0.00 sec) Is this bug already known? For the time being I jut disabled random serial numbers. One approach would be to explicitly specify the datatypes for all the bind values. So the typecasting would not happen anymore. Cheers Sam
--
Best Regards,
Massimiliano Pala
--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] ope...@acm.org
project.mana...@openca.org
Dartmouth Computer Science Dept Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory Work Phone: +1 (603) 646-8734
--o------------------------------------------------------------------------
People who think they know everything are a great annoyance to those of us
who do.
-- Isaac Asimov
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev
_______________________________________________ Openca-Users mailing list Openca-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-users
