Hello,

it's me again.... The server is not starting up.

I got this message in the log file :
Exception during server initialization: 
I18N_OPENXPKI_SERVER_INIT_PKI_REALMS_NO_CRL_VALIDITY; __CAID__ => hr_access_ca 
at /usr/lib/perl5/OpenXPKI/Server.pm line 823.


But I have a correct crl entry in profile.xml
   1 <profiles id="default_profiles">
   2   <crl>
   3     <profile id="default">
   4       <validity>
   5         <!-- notbefore is not applicable here -->
   6         <notafter  format="relativedate">+000014</notafter>
   7       </validity>
   8
   9       <digest>sha1</digest>
  10       <extensions>
  11       </extensions>
  12     </profile>
  13
  14     <profile id="hr_access_ca"
  15              super="../profile{default}"/>
  16   </crl>

Next interesting is in the log file that the corresponding code section is 
entered three times:

I added some messages:
/var/openxpki/openxpki.log:2009/05/07 18:36:44 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CAID 'hr_access_ca' (PKI realm HR_Access)
/var/openxpki/openxpki.log:2009/05/07 18:36:44 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb4174d0)
/var/openxpki/openxpki.log:2009/05/07 18:36:44 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb403bb8)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS Count PKI  1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS Count '1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CAID 'hr_access_ca' (PKI realm HR_Access)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb42d2b0)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb430e10)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS Count PKI  1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS Count '1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CAID 'hr_access_ca' (PKI realm HR_Access)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? :
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO 
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? :

And the corresponding code section in Server/Init.pm:

1437             # sanity check: there must be a CRL validity configuration
1438             # for this issuing CA
1439                 log_wrapper({ MESSAGE  => "ANDREAS CAID '$ca_id' (PKI 
realm $name)", PRIORITY => "info", FACILITY => "system", });
1440                 log_wrapper({ MESSAGE  => "ANDREAS CRL ? : " . 
$realms{$name}->{crl}->{id}->{$ca_id} . " ", PRIORITY => "info", FACILITY => 
"system", });
1441                 log_wrapper({ MESSAGE  => "ANDREAS CRL ? : " . 
$realms{$name}->{crl}->{id}->{$ca_id}->{validity} . " ", PRIORITY => "info", 
FACILITY => "     system", });
1442
1443             if (! exists 
$realms{$name}->{crl}->{id}->{$ca_id}->{validity}) {
1444                 OpenXPKI::Exception->throw (
1445                     message => 
"I18N_OPENXPKI_SERVER_INIT_PKI_REALMS_NO_CRL_VALIDITY",
1446                     params => {
1447                         CAID   => $ca_id,
1448                     },
1449                 );
1450             }

As you can see, the third time the 
corresponding XML is missing.



kind regards
Andreas

------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image 
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to