Hi Alex, Alexander Klink schrieb: > Hi Steffen, > > On Thu, May 14, 2009 at 12:02:07AM +0200, Steffen Waitz wrote: >> after successfully installing the latest OpenXPKI code from Sf, i've >> tried to create a user certificate. Unfortunally i'm stuck in the >> issuing of the certificate. The Webinterface has given me this error: >> >> I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_CHILD_ERROR; __SIGNAL__ => 0; >> __EXIT_CODE__ => 1 >> >> After some googling an reading the mailing list i've found out that i >> have to start the openxpki daemon with the debug option to get more >> detailed information about. Now this is what i've got: > > That's a good start. Unluckily, for invocations of external programs, > that is sometimes not enough.
Correct ;-) > >> OpenXPKI::Crypto::CLI::execute (line 127): command: /usr/bin/openssl ca >> -batch -sub >> j "/DC=org/DC=OpenXPKI/DC=Test Deployment/CN=xxxx xxxx+UID=abc" >> -multivalue-rdn -out /var/tmp/openxpkiaHWTwA -in /var/tm >> p/openxpkirAGx3e -passin env:pwd 1>>/var/tmp/openxpkiQIaDQB >> 2>>/var/tmp/openxpkiWmEcBp > openx...@xpki:~> less /opt/openxpki/etc/openxpki/ca/testdummyca1/cakey.pem /opt/openxpki/etc/openxpki/ca/testdummyca1/cakey.pem: Permission denied > It would be interesting to see the file into which the STDERR output > is redirected (in this case /var/tmp/openxpkiWmEcBp). It is deleted > right after the command exits, though. Can you please try patching > CLI.pm with the attached patch which disables this deletion and > look at the output of the STDERR redirect? After applying ur patch, i found out that the openxpki user can't read the certificate. openx...@xpki:~> less /opt/openxpki/etc/openxpki/ca/testdummyca1/cakey.pem /opt/openxpki/etc/openxpki/ca/testdummyca1/cakey.pem: Permission denied I set the right permissions on the /opt/openxpki, restarted the openxpki daemon and e voila the the error was gone. Thank u for ur support Steffen ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
