thats exactly the reason - it tries to load a policy configuration from
a node that is not found, if you have also blindly upgraded the
configuration to the recent HEAD then the explicit servername=generic
was dropped from the SCEP configuration to make it working with the
"autodiscovery" feeature. So you should either use /scep/generic as URL
or create scep/generic.yaml inside the realm.
Oliver
On 25.08.23 13:05, Nick Dawson wrote:
Just curious why you have ./scep/scep in the url?
OpenXPKI's wrapper expansion may be looking for a script that doesn't
exist
On Fri, Aug 25, 2023 at 3:57 AM, chris
<[email protected]> wrote:
Hello everyone,
i am testing the new version of openxpki v3.26 and i came across
this error while sending scep request, i am using the same config
which was working on v3.25.5. heres the error:
root@debian:~# sscep enroll -u http://localhost/scep/scep
<http://localhost/scep/scep> -k scep-test.key -r scep-test.csr -c
cacert-0 -l scep-test.crt -t 10 -n 1
sscep: sending certificate request
sscep: valid response from server
sscep: reply transaction id: B8D5ADA2E399B6992BC3FC40DFD98714
sscep: pkistatus: FAILURE
sscep: reason: Transaction not permitted or supported
this is the log:
2023/08/25 14:28:36 openxpki.auth.INFO <http://openxpki.auth.INFO>
Login successful (user: Anonymous, role: System) [pid=4413|sid=mO8c]
2023/08/25 14:28:36 openxpki.auth.INFO <http://openxpki.auth.INFO>
Login successful (user: Anonymous, role: System) [pid=4414|sid=vwI5]
2023/08/25 14:28:38 openxpki.application.WARN No policy params set
in LoadPolicy
[pid=4414|user=Anonymous|role=System|sid=vwI5|wftype=certificate_enroll|wfid=1023]
2023/08/25 14:28:38
OpenXPKI.Server.Workflow.Condition.KeyParams.ERROR
configuration_error exception thrown from
[OpenXPKI::Server::Workflow::Condition::KeyParams: 40; before:
OpenXPKI::Server::Workflow::Condition: 53]: You must pass either
the profile name or the key_rules directly
[pid=4414|user=Anonymous|role=System|sid=vwI5|wftype=certificate_enroll|wfid=1023]
2023/08/25 14:28:38
OpenXPKI.Server.Workflow.Condition.KeyParams.ERROR
configuration_error exception thrown from
[OpenXPKI::Server::Workflow::Condition::KeyParams: 40; before:
OpenXPKI::Server::Workflow::Condition: 53]: You must pass either
the profile name or the key_rules directly
[pid=4414|user=Anonymous|role=System|sid=vwI5|wftype=certificate_enroll|wfid=1023]
how can i fix it?
Regards,
Chris
_______________________________________________
OpenXPKI-users mailing list
[email protected]
<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/openxpki-users
<https://lists.sourceforge.net/lists/listinfo/openxpki-users>
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
--
Protect your environment - close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
