Paul Freeman wrote:
I have come across 2 small problems which may be due to my mistakes but I thought I would ask anyway:-)
I am using version 2.0.0-beta4 of newpki on RedHat 9.
If you select display logs from the menu of a CA entity, then select log filters and select to filter on date (choosing start and finish dates) all works OK.
However if you then decide to revise the log filter start date you cannot, without closing the Display logs window and selecting Display logs again from the menu.
If you select log filters on an already filtered log, the start and end date are locked on 1 Aug 2004 and cannot be changed. Other filter options also appear dimmed.
Is this the intended behaviour or should one be able to revise the filters without having to redisplay the logs from scratch?
This is a bug.
Secondly, I tried to import a certificate request into the RA entity which had been generated on another linux box, by the openssl CA shell script utlilty. I renamed the newreq.pem as newreq.csr and the file is imported OK using PKCS#10 import from the Create new Profile and I can display its properties correctly.
When you generate the request, it is not activated. Looking at the logs (syslog for newpki server), I notice an error #3000 in RaStore.cpp, Line 811. This concerns mail responses.
Have I made a mistake somewhere here in generating the initial request? I have a pass phrase as well as a private key password.What are the general requirements for a csr generated externally to newpki which is then imported into the newpki RA? My initial investigations indicate the certificate has probably been created but something is going wrong in the notification process?
I guess this is another bug, I'll look into this.
How can I delete this reqest? Do I delete the profile?
Right know, you'ld have to execute some SQL :) Let's say your RA is named "my_ra" and that your request has id "99":
Stop the newpki server. Run a mysql shell:
% use my_ra % update requester set status='2' where priv_attr='99';
That should do it.
Don't forget to revoke the certificate from the CA GUI. You should probably remove the profile as well.
My advise is not to use the "Send resulting certificate to user by mail" feature when importing a PKCS#10.
Regards, -- Fr�d�ric Giudicelli http://www.newpki.org _____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
