On Tue, 24 Aug 2004, Fr�d�ric Giudicelli wrote: > > Secondly, I tried to import a certificate request into the RA entity > > which had been generated on another linux box, by the openssl CA shell > > script utlilty. I renamed the newreq.pem as newreq.csr and the file is > > imported OK using PKCS#10 import from the Create new Profile and I can > > display its properties correctly. > > > > When you generate the request, it is not activated. Looking at the logs > > (syslog for newpki server), I notice an error #3000 in RaStore.cpp, Line 811. > > This concerns mail responses. > > > > Have I made a mistake somewhere here in generating the initial > > request? I have a pass phrase as well as a private key password.What > > are the general requirements for a csr generated externally to newpki > > which is then imported into the newpki RA? My initial investigations > > indicate the certificate has probably been created but something is > > going wrong in the notification process? > > I guess this is another bug, I'll look into this. > > > How can I delete this reqest? Do I delete the profile? > > Right know, you'ld have to execute some SQL :) > Let's say your RA is named "my_ra" and that your request has id "99": > > Stop the newpki server. > Run a mysql shell: > > % use my_ra > % update requester set status='2' where priv_attr='99'; > > That should do it. > Don't forget to revoke the certificate from the CA GUI. You should > probably remove the profile as well. > > My advise is not to use the "Send resulting certificate to user by mail" > feature when importing a PKCS#10. > Frederic Thanks for the help. It turned out I also needed to update the status in the certs table of the requester database to '3' for the offending request id. Otherwise, nothing happened and I could not revoke the profile within the RA.
Regards +++---+++---+++---+++---+++---+++---+++---+++---+++---+++---+++---+++ EML Consulting Services Pty Ltd Telephone: +61 3 9836 1999 417-431 Canterbury Road Facsimile: +61 3 9836 0517 SURREY HILLS, VICTORIA 3127 Email: [EMAIL PROTECTED] +++---+++---+++---+++---+++---+++---+++---+++---+++---+++---+++---+++ _____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
