On Tuesday 03 February 2009 13:08:22 Alexander Klink wrote: Hi, Alex! Thank you so much for your response. I've tried to run the command:
# openxpkiadm certificate import --realm MYCA \ --issuer-realm MYCA --file /usr1/myca/ca/sub_ca/services/ca_cert.pem \ --issuer CA_ROOT_MYCA but got the same diagnostics: I18N_OPENXPKI_CRYPTO_X509_INIT_OBJECT_FAILED; __ERRVAL__ => I18N_OPENXPKI_CRYPTO_OPENSSL_GET_OBJECT_NO_REF (BTW, 'openssl verify' says OK.) For more information, i am using PostgreSQL as a backend storage. Thank you, Sergey. > Hi Sergey, > > On Tue, Feb 03, 2009 at 12:26:26PM +0300, Sergey V. Koupreyenko wrote: > > Now i need to import certificate for my issuing CA MYCA_SERVICES into the > > realm MYCA but i've got an error: > > # openxpkiadm certificate import --realm MYCA \ > > --file /usr1/myca/ca/sub_ca/services/ca_cert.pem -issuer CA_ROOT_MYCA > > I18N_OPENXPKI_CRYPTO_X509_INIT_OBJECT_FAILED; __ERRVAL__ => > > I18N_OPENXPKI_CRYPTO_OPENSSL_GET_OBJECT_NO_REF > > > > What's wrong? Please help me. I am using FreeBSD 7.1-RELEASE. OpenxPKI is > > installed from the port collection. > > If this is your exact command line, you're missing a '-' in the '--issuer' > part. Also, you may need to specify the realm where the issuer alias is > defined with the --issuer-realm option. > > I believe in total, the command line should read > # openxpkiadm certificate import --realm MYCA --issuer-realm MYCA \ > --file /usr1/myca/ca/sub_ca/services/ca_cert.pem --issuer CA_ROOT_MYCA > > HTH, > Alex ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
