Re: [OpenXPKI-users] Sscep problem

Hi Ali, please uprade to v3.28.2 (see recent message) - this will fix the issue. Oliver On 05.02.24 14:24, Ali Danakiran wrote: Hey, Thanks for your help. I have now changed it and now I get the certificates displayed via WebGui under My Tasks but via CLI it still says Failure and I still

Re: [OpenXPKI-users] Sscep problem

Hey, Thanks for your help. I have now changed it and now I get the certificates displayed via WebGui under My Tasks but via CLI it still says Failure and I still have error logs. Where can I define signers? Workflows.log: 2024/02/05 07:19:42 8703 Rendering subject: CN=scep-server,DC=Test

Re: [OpenXPKI-users] Sscep problem

Hi Ali, you need to define a policy file matching the name of the used endpoint. The endpoint is the later part of the used URL, so "scep" in your case and so must be the name of the policy file in config.d/realm/democa/scep. The default configuration ships a file named "generic.yaml", so

Re: [OpenXPKI-users] Sscep problem

Hello, Sorry for replying so late. I have now looked up ErrorLog. Scep.log: 2024/02/05 01:52:43 WAR Client error / bad request badRequest [pid=61645|ep=scep] 2024/02/05 01:52:43 INF Disconnect client connection [pid=61645|ep=scep] Workflows.log: 2024/02/05 01:52:42 6655 No policy parameters set

Re: [OpenXPKI-users] Sscep problem

Hi Ali, go to the Webui, search for the workflow and read the error message there - if there is no workflow, check the scep.log on the console and try running sscep with "-v" or "-d" to get some additional output. Oliver On 30.01.24 15:48, Ali Danakiran wrote: Hi Can anyone tell me why I

Re: [OpenXPKI-users] Sscep problem

Hi Can anyone tell me why I get the error code. */sscep# ./sscep enroll -u http://IP-ADDRESS/scep/scep \ -k tmp/scep-test.key -r tmp/scep-test.csr \ -c tmp/cacert-0 \ -l tmp/scep-test.crt \ -t 10 -n 1* ./sscep: Certificate request sent ./sscep: Valid response from the

Re: [OpenXPKI-users] Sscep problem

Hi, > I'm a bit further along now, I installed sscep via Github Link but now I get > the error message: > /sscep# ./sscep getca -c tmp/cacert -u http://domainorip/scep/scep > ./sscep: cannot open cert file for writing mkdir tmp and retry. Cheers Martin

[OpenXPKI-users] Sscep problem

Hey, I'm a bit further along now, I installed sscep via Github Link but now I get the error message: /sscep# ./sscep getca -c tmp/cacert -u http://domainorip/scep/scep ./sscep: cannot open cert file for writing ___