[OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread James B. Byrne via OpenXPKI-users
I have an existing host with an existing private key: 2016002C.key I generated a new csr from the private key: openssl req -new -key 2016002C.key -out 2016002C_20240507.csr head -5 2016002C_20240507.csr -BEGIN CERTIFICATE REQUEST- MIIFLDCCAxQCAQAwgcExCzAJBgNVBAYTAkNBMRAwDgYDVQQIDAdPbnRhc

Re: [OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread Martin Bartosch via OpenXPKI-users
James, > I generated a new csr from the private key: > > openssl req -new -key 2016002C.key -out 2016002C_20240507.csr No, you regenerated the same CSR from the same private key. > When I paste the entire .csr into openxpki webui I get this error: > > > The uploaded key was found to be used a

Re: [OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread Oliver Welter
Hi James, the default workflows disallow reusing a private key which is pretty much what the message tries to tell you, the location where this key is already used should be visible from the WebUI. This behaviour can only be changed by modifing the workflows as we consider this an elemental

Re: [OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread James B. Byrne via OpenXPKI-users
On Tue, May 7, 2024 10:02, Oliver Welter wrote: > Hi James, > > the default workflows disallow reusing a private key which is pretty > much what the message tries to tell you, the location where this key is > already used should be visible from the WebUI. > > This behaviour can only be changed by m

[OpenXPKI-users] I18N_OPENXPKI_SERVER_CONTEXT_CTX_OBJECT_NOT_DEFINED

2024-05-07 Thread James B. Byrne via OpenXPKI-users
When issuing this command: openxpkiadm certificate remove \ --realm 'hll_ca2016' \ --name yeLQaPyw7YGVcs7W7-X5pBcljCw I see this error: I18N_OPENXPKI_SERVER_CONTEXT_CTX_OBJECT_NOT_DEFINED OBJECT: session What does this mean? It appears that using the --force option eliminates the erro