Hi,
> I am using OpenXPKI Version 3.30.9 and i am trying to make RPC work, so far i
> was able to search and revoke certificates but I am having some issue
> Requesting certificate using a csr. I am sharing the Command and CSR
> generation below, please let me know what I am missing. The command and error
> are as below:
>
> openssl genpkey -algorithm RSA -out chris.key -pkeyopt rsa_keygen_bits:2048
>
> openssl req -new -key chris.key -out chris.csr -subj
> "/CN=chris.com/O=ChrisCorp/OU=IT Department/L=San
> Francisco/ST=California/C=US/[email protected]"
>
> root@debian:~/temp# curl -v -H "Content-Type: application/json" --data
> "{\"pkcs10\": \"$(awk 'NF {sub(/\r/, ""); printf "%s\\n",$0;}' chris.csr |
> sed ':a;N;$!ba;s/\n/\\n/g' | sed 's/\"/\\"/g')\", \"profile\":
> \"tls_server\", \"comment\": \"Automated Request\", \"signature\": \"\"}"
> --key /root/temp/pkiclient.key --cert /root/temp/pkiclient.crt --cacert
> /root/temp/cacert.crt
> {"result":{"proc_state":"finished","id":8959,"data":{"transaction_id":"89518eeaa5d3e091a6616ffc72fdc5a26f2e06d1","error_code":"Invalid
> Profile"},"pid":2187,"state":"FAILURE"}}
The error message indicates that the profile argument of your RPC call is
invalid. If you are using the unmodified community sample configuration, the
profile mapping maps "tls-server" to the internal profile "tls_server", so the
former ("tls-server") in your command line instead.
Cheers
Martin
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
