Hello Everybody,

I'm sorry for writting this message here but, I don't
know who else can help me on this issue. This is the
problem.

I need to sign all the requests in the RA with just a
few clicks, in the RA there should be a link called
"Sing all" or something. after that the interface asks
for the password fot the RA certificate and then start
signing all requests.

I'm trying to do this through a java program I'm
writting, I can store requests using a java program,
I'm calling the script:
https://192.168.110.221/cgi-bin/pub/pki And I sent the
additional parameters for OpenCA to store the request,
so thought it would be as easy as that to approve
requests: so I'm making the https connection to this
URL: https://192.168.110.221/cgi-bin/ra/RAServer
Giving the parameters that the script receives to
approve a CSR, the parameters are: head,
cmd=approveCSR, signature='signature base 64',
dataType = "NEW_REQUEST"text="text to sign, the
request itself", key="ID of the CSR"

After making the connection through my java app, the
response from the server is an html page that I guess
is the login page or similar the html source code is:


I'm thinking the problem is because I don't have any
stablished session in my java code when I try to
stablish the connection. I was looking in the session
directory (/usr/local/OpenCA/var/session/cookie/ra)
and , after opening one of these cookies, the
structure they have is like this:


$D = {"PREFERENCES_CHARSET" =>
"iso-8859-1","_SESSION_ID" =>
"fff91440c137bc3c00fac8d832a5edd1","_SESSION_ETIME" =>
1200,"name" => "root","_SESSION_REMOTE_ADDR" =>
undef,"_SESSION_CTIME" => "1107549709","valid" =>
1,"_SESSION_ATIME" =>
"1107549730","PREFERENCES_LANGUAGE" => "es_ES","role"
=> "ca operator","_SESSION_EXPIRE_LIST" => {}};


And after catching the connection (made from the RA
web Interface, using a snifer) in the headers I can
see something like this:


POST /cgi-bin/ra/RAServer HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.7) Gecko/20040616
Accept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer:
http://localhost/cgi-bin/ra/RAServer?cmd=viewCSR;dataType=NEW_REQUEST;key=26144
Cookie: CGISESSID=05316203e40bee812747ec5363bbf683;
testing=1; sid=1962541132717c8761e12bd13c3b1c06

Content-Type: multipart/form-data;
boundary=---------------------------1220429386526130934235886253

Content-Length: 4609


-----------------------------1220429386526130934235886253
Content-Disposition: form-data; name="head"


So, in the cookie Propertie of the connection it says:
Cookie: CGISESSID=05316203e40bee812747ec5363bbf683;
testing=1; sid=1962541132717c8761e12bd13c3b1c06

from this I think CGISESSID comes from the cookie name
but How can I obtain sid?

Can Anyone help me on this?

Thanks a lot,
Johnny




                
______________________________________________ 
Renovamos el Correo Yahoo!: �250 MB GRATIS! 
Nuevos servicios, m�s seguridad 
http://correo.yahoo.es


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
OpenCA-Devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to