Re: [Openca-Users] RA CSR upload problesm
Kevin Mitcham wrote: I'm having trouble uploading CSRs from my RA to the CA. I submit the request, and approve it without signing, and everything seems to work. However, when I go to the RA-Node/dataexchange to upload data to a higher level the export file is empty (except for the directory structure and module.id file)- no certificate requests are exported. I'm trying to run it down in the source code myself, and failing. Any suggestions? I am running a snapshot from CVS as of April 18th-essentially RC4. Did you correctly choose the appropriate configuration template for the dataexchange in config.xml before you are running configure_etc.sh on the RA and on the CA? OpenCA's dataexchange does not export or import anything if you don't change the used template in config.xml. We must do this for security reasons to avoid impacts into the infrastructure of the CA. Best regards Michael -- --- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und MedienserviceTel.: +49 (0)30-2093 2482 (Computing Centre)Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
Re: [Openca-Users] Problem reading CRIN-Mail
Hi, Today I found where the problem comes from. In the file OpenSSL.pm under OpenCA/Perl libraires, the certificate which was used to encrypt the mail was the one which sign messages instead of the newly generatred one. To fix this bug, I replaced line 2576 in OpenSSL.pm $smime-encrypt(CERTIFICATE = $sign_x509) with $smime-encrypt(CERTIFICATE = $enc_x509) Have a nice day, Sébastien Poggi [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 21/04/2004 15:00 Please respond to [EMAIL PROTECTED] To [EMAIL PROTECTED] cc Subject [Openca-Users] Problem reading CRIN-Mail Hi everybody, Whatever I do, I cannot achieve to decrypt the 'OpenCA Certificate and PIN information' mail sent by the CA when a certificate is issued. I've imported the CA certificate and my own certificate into my mail client (Outlook Express or Mozilla according to the browser I used to create the CSR) and assigning this one to my profile into Outlook or Mozilla. ( Of course I'm assuming the CRIN mail is encrypted with my own public key ) However when I'm trying to send or receive an encrypted mail with an other person which had a certificate issued by my CA, everything is working perfectly. So is there anything that I'm doing wrong or I need to know in order to decrypt this mail ? Have a nice day, Sebastien Poggi
[Openca-Users] a problem
hi everyone i have tried again . but the ca still has problem.i can not write the cert to the floppy. but my floppy disk and driver are both availible . and i can write text to the floppy by hand.so may the ca has problem? but the phase on the screen shows the ca has finished the write of the certs. anybody could show me a way thank you very much leon _ MSN Messenger: http://messenger.msn.com/cn --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
Re: [Openca-Users] RA CSR upload problesm
Michael wrote: Did you correctly choose the appropriate configuration template for the dataexchange in config.xml before you are running configure_etc.sh on the RA and on the CA? OpenCA's dataexchange does not export or import anything if you don't change the used template in config.xml. We must do this for security reasons to avoid impacts into the infrastructure of the CA. Best regards Michael -- --- i want to know what is the mean to change the used template and how to do thank you leon _ MSN Messenger: http://messenger.msn.com/cn --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
Re: [Openca-Users] Problem reading CRIN-Mail
[EMAIL PROTECTED] wrote: To fix this bug, I replaced line 2576 in OpenSSL.pm $smime-encrypt(CERTIFICATE = $sign_x509) with $smime-encrypt(CERTIFICATE = $enc_x509) ah great - i will put this into cvs - so should be available to all tomorrow (since the public cvs is usaly around one day behind) greetings dalini --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
Re: [Openca-Users] RA CSR upload problesm
lin leon wrote: Michael wrote: Did you correctly choose the appropriate configuration template for the dataexchange in config.xml before you are running configure_etc.sh on the RA and on the CA? OpenCA's dataexchange does not export or import anything if you don't change the used template in config.xml. We must do this for security reasons to avoid impacts into the infrastructure of the CA. Best regards Michael -- --- i want to know what is the mean to change the used template and how to do you go to: installdir/.../etc and look into file config.xml at the end - there is a section for configuring dataexchange there are 5 or 6 templates - from wich the first one ist activated, and this stands for - everything is at the same machine... you have to comment out this section and choose the apropriate one for the right node so for the ra - choose a template for ra, with ldap,public,scep whatever you have and for the ca activate the ca only template then you have to rerun ./configure_etc.sh to get the configfiles updated... greetings dalini --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
[Openca-Users] Language Problem with Debian
Hi, who can tell me, what packages i need to make it possible to change language on my debian system? Michael Bell told me, that this was discussed on one openca list, but i couldnt find it :( Thx Til Obes --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg297 ___ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
Re: [Openca-Users] RA CSR upload problesm
The best part about stupid problems is that the solutions are often easy and quick. Fixing the config.xml file solved the problem immediately, thank you very much. Kevin Michael Bell wrote: Kevin Mitcham wrote: I'm having trouble uploading CSRs from my RA to the CA. I submit the request, and approve it without signing, and everything seems to work. However, when I go to the RA-Node/dataexchange to upload data to a higher level the export file is empty (except for the directory structure and module.id file)- no certificate requests are exported. I'm trying to run it down in the source code myself, and failing. Any suggestions? I am running a snapshot from CVS as of April 18th-essentially RC4. Did you correctly choose the appropriate configuration template for the dataexchange in config.xml before you are running configure_etc.sh on the RA and on the CA? OpenCA's dataexchange does not export or import anything if you don't change the used template in config.xml. We must do this for security reasons to avoid impacts into the infrastructure of the CA. Best regards Michael smime.p7s Description: S/MIME Cryptographic Signature
