Thanks,
that did the trick again....
On Fri, 8 May 2009, Alexander Klink wrote:
Date: Fri, 8 May 2009 09:59:00 +0200
From: Alexander Klink <[email protected]>
Reply-To: [email protected]
To: [email protected]
Subject: Re: [OpenXPKI-users] OpenXPKI not starting because of missing CRL?
Hi Andreas,
On Thu, May 07, 2009 at 06:52:17PM +0200, Andreas Cordes wrote:
it's me again.... The server is not starting up.
I got this message in the log file :
Exception during server initialization:
I18N_OPENXPKI_SERVER_INIT_PKI_REALMS_NO_CRL_VALIDITY; __CAID__ => hr_access_ca
at /usr/lib/perl5/OpenXPKI/Server.pm line 823.
But I have a correct crl entry in profile.xml
1 <profiles id="default_profiles">
2 <crl>
3 <profile id="default">
4 <validity>
5 <!-- notbefore is not applicable here -->
6 <notafter format="relativedate">+000014</notafter>
7 </validity>
8
9 <digest>sha1</digest>
10 <extensions>
11 </extensions>
12 </profile>
13
14 <profile id="hr_access_ca"
15 super="../profile{default}"/>
16 </crl>
Did you add this after encountering the error? I suspect that there
might be a bug that OpenXPKI already saves the configuration in the
config table before it successfully starts up. Can you please try
to delete the config table entries manually and try to start OpenXPKI
again?
Next interesting is in the log file that the corresponding code section is
entered three times:
I added some messages:
/var/openxpki/openxpki.log:2009/05/07 18:36:44 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CAID 'hr_access_ca' (PKI realm HR_Access)
/var/openxpki/openxpki.log:2009/05/07 18:36:44 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb4174d0)
/var/openxpki/openxpki.log:2009/05/07 18:36:44 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb403bb8)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS Count PKI 1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS Count '1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CAID 'hr_access_ca' (PKI realm HR_Access)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb42d2b0)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? : HASH(0xb430e10)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS Count PKI 1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS Count '1
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CAID 'hr_access_ca' (PKI realm HR_Access)
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? :
/var/openxpki/openxpki.log:2009/05/07 18:36:45 openxpki.system.INFO
[OpenXPKI::Server::Init (156)] ANDREAS CRL ? :
This would fit my theory - you might already have three diferent
configurations in the config table.
HTH,
Cheers,
Alex
--
Dipl.-Math. Alexander Klink | IT-Security Engineer
[email protected] | working @ urn:oid:1.3.6.1.4.1.11417
------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
Grüße von der Nordsee
Andreas Cordes
Leiter der Arbeitsgruppe Digitales
DLRG-Jugend im Bundesverband
-------------------------------
Mail: [email protected]
------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
