Hi,

Of course the chain exists, 
#cd ~/var/crypto/chain
#ls
ba2f39ca.0 cacert.crt Makefile
by the way, CA cert and key exist, too.

Thanks a lot!

On Tue, 17 Jan 2006 17:22:42 +0100, Michael Bell wrote
> FAN HuaXiang wrote:
> >             Error 560
> >                   General Error Signature Object not returned, check the
> > openca-verify command. Cannot build PKCS#7-object from extracted 
signature!
> >                   OpenCA::PKCS7 returns errorcode 7911031 (OpenCA::PKCS7-
>new:
> > Cannot initialize signature (7912021). OpenCA::PKCS7->initSignature: 
Cannot
> > parse signature (7921021). OpenCA::PKCS7->getParsed: The crypto-backend 
cannot
> > verify the signature (7742075). OpenCA::OpenSSL->verify: openca-sv 
failed.
> > [Error]: error:04077068:rsa routines:RSA_verify:bad signature
> >                   [Info]: Input file intialized.
> >                   [Info]: Signaturefile initialized.
> >                   [Info]: Reading Certificate file.
> >                   [Info]: PKCS#7 object loaded.
> >                   [Info]: Data is ready for verification.
> >                   [Info]: Signature Informations (PKCS#7):
> >                   depth:0 serial:0D 
subject:CN=raoperator,OU=IHEP,O=HEP,C=CN
> >                   error:20:unable to get local issuer certificate
> >                   [Info]: Signature is corrupt. Errorcode -1.
> >                   signature:error:-1
> >                   ).
> 
> This mean that you are missing a CA certificate in your CA chain. Did
> you rebuild your CA chain after the import? Usually the CA 
> certificate is missing in the chain or you forgot the rebuild operation.
> 
> Michael
> -- 
> _______________________________________________________________
> 
> Michael Bell                    Humboldt-Universitaet zu Berlin
> 
> Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
> Fax:  +49 (0)30-2093 2704       Unter den Linden 6
> [EMAIL PROTECTED]   D-10099 Berlin
> _______________________________________________________________


Kind Regards,

FAN HuaXiang
Computing Centre
Institute of High Energy Physics
Chinese Academy of Sciences
Beijing,P.R.China



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
OpenCA-Devel mailing list
OpenCA-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to