Re: [Openca-Users] PKCS12 renewal failed

2007-08-28 Thread Ralf Hornik Mailings
And finally solved :-) I formerly changed the PIN. BUT I would recomment, when the PIN has been changed on the RA/Public Node, the new issued certificate SHOULD have the recent PIN of the old expired certificate. Otherwise the PIN can easily be lost and the new certificate will become unusable!!

Re: [Openca-Users] PKCS12 renewal failed

2007-08-28 Thread Ralf Hornik Mailings
Appendum: the public_key fields are both the same (old cert and new). Only the private key differs but is encrypted. However, the private key from the expired cert I can decrypt using my known PIN, but the new ones private key I cannot. It schould be the same encrypted private key as the old one

[Openca-Users] PKCS12 renewal failed

2007-08-28 Thread Ralf Hornik Mailings
Hi, after my RA (Registration Authority Administrator) certificate has been expired, I tried to renew it. Now, I cannot download the new RA certificate using the known PIN. In the Mysql database, the keys from the old cert and new are different. Shouldn't they be equal? Same happened with the CA