Hi,
I meet difficulties using "getcert request" (from certmonger).
# CLIENT SIDE
Here is how I am trying to get a certificate from OpenXPKI SCEP server from a
client :
$ getcert request -I obtenirUnCertificat -c openxpki -d /etc/pki/nssdb -n
scep-client-test -N cn="app.domain.lan"
$ getcert list
Number of certificates and requests being tracked: 1.
Request ID 'obtenirUnCertificat':
status: CA_UNREACHABLE
ca-error: Server reply was of unexpected MIME type "text/plain".
stuck: no
key pair storage:
type=NSSDB,location='/etc/pki/nssdb',nickname='scep-client-test',token='NSS
Certificate DB'
certificate: type=NSSDB,location='/etc/pki/nssdb',nickname='scep-client-test'
signing request thumbprint (MD5): 44947907 8D31F82C A722E441 891312E5
signing request thumbprint (SHA1): B329431B 72243BB2 8EC57B10 B632DDF6 FFD80142
CA: openxpki
issuer:
subject:
expires: unknown
pre-save command:
post-save command:
track: yes
auto-renew: yes
As you can read the error is : "Server reply was of unexpected MIME type
"text/plain"."
# OPENXPKI SIDE
On the Openxpki side, openxpki.log is showing :
2022/02/07 14:46:14 ERROR
I18N_OPENXPKI_SERVICE_LIBSCEP_COMMAND_PKIOPERATION_PARALLEL_REQUESTS_DETECTED;
__DPSTATE__ => creating, __SERVER__ => generic, __TRANSACTION_ID__ =>
98045844304779527357588258779756540595169315217199782481781298876007486699834
[pid=181|sid=Hogn|sceptid=98045844304779527357588258779756540595169315217199782481781298876007486699834]
2022/02/07 14:46:14 ERROR Error executing SCEP command 'PKIOperation':
I18N_OPENXPKI_SERVICE_LIBSCEP_COMMAND_PKIOPERATION_PARALLEL_REQUESTS_DETECTED;
__DPSTATE__ => creating, __SERVER__ => generic, __TRANSACTION_ID__ =>
98045844304779527357588258779756540595169315217199782481781298876007486699834
[pid=181|sid=Hogn|sceptid=98045844304779527357588258779756540595169315217199782481781298876007486699834]
And scep.log
2022/02/07 14:46:13 INF Incoming request from 192.168.56.126 with GetCACaps
[pid=79]
2022/02/07 14:46:14 INF Incoming request from 192.168.56.126 with PKIOperation
[pid=79]
2022/02/07 14:46:14 ERR SCEP response is empty [pid=79]
Does anyone manage to use certmonger for scep requests to openxpki please ?
Thank you.
Best regards.
Eric.
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
