Hello!
I am trying to set up my own PKI using OpenxPKI software.
I have successfuly deployed and initialized configuration. It consists single
PKI realm (MYCA) with single issuing CA (MYCA_SERVICES).
Also i have two certificate/key pairs which are created using openssl utility
(not inside OpenXPKI). They are self-signed root certificate and subordinate
CA certificate which is signed by the root cert.
I have my self-signed root cert successfuly imported and aliased into the
OpenxPKI. It looks like this:
# openxpkiadm certificate list --all
Certificates in MYCA:
Certificates in self-signed pseudo-realm:
Identifier: BUMAymHoGH68nDdFvJ2XgCR9-Eo
Alias:
CA_ROOT_MYCA (in realm: MYCA)
Also i have imported the private key for my subordinate CA certificate (key
list with some warnings):
root(tool)#>openxpkiadm key list --realm MYCA
CA keys:
Key for purpose CA with ID: MYCA_SERVICES
+ /usr/local/etc/openxpki/ca/myca/services/cakey.pem
EVAL_ERROR: I18N_OPENXPKI_XML_CACHE_GET_XPATH_COUNT_NOTHING_FOUND; __XPATH__
=> pki_realm/0/common/0/secret/0/group/0/method/0/required_shares Secret
group: default
Secret method: plain (n = 1, k = 1)
SCEP keys:
I18N_OPENXPKI_XML_CACHE_GET_XPATH_COUNT_NOTHING_FOUND; __XPATH__ =>
pki_realm/0/scep
Now i need to import certificate for my issuing CA MYCA_SERVICES into the
realm MYCA but i've got an error:
# openxpkiadm certificate import --realm MYCA \
--file /usr1/myca/ca/sub_ca/services/ca_cert.pem -issuer CA_ROOT_MYCA
I18N_OPENXPKI_CRYPTO_X509_INIT_OBJECT_FAILED; __ERRVAL__ =>
I18N_OPENXPKI_CRYPTO_OPENSSL_GET_OBJECT_NO_REF
What's wrong? Please help me. I am using FreeBSD 7.1-RELEASE. OpenxPKI is
installed from the port collection.
Truly, Sergey.
------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
