Bob Olson wrote:
>
> Okay, getting further. I can request a cert from IE, and approve it, but
> the IE download didn't work (got a file that IE didn't do anything
> with). Not worried about that at the moment, since I'm going to be using
> Netscape for the server keys. However, when I request a netscape cert,
> then try to approve it, I get this:
>
> Using configuration from /usr/local/CAServer/conf/openssl/openssl.cnf
> Netscape SPKAC structure not found in /usr/local/CAServer/tmp/02.req
> Error Trapped: Error while issuing Certificate to Robert
> Olson<BR><BR>(file name: /usr/local/CAServer/tmp/02.req ) at
> lib/misc-utils.lib line 53, <FD> line 1.
> Compilation failed in require at /var/www/cgi-caserver/ca line 160, <FD>
> line 1.
>
> 02.req contains this:
>
> EMAIL = [EMAIL PROTECTED]
> CN = Robert Olson
> 1.OU = OpenCA User
> 2.OU = Internet
> O = AccessGrid
> C = US
> SPKAC =
>
>MIIBQTCBqzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAve2xc4QTWH/H82cy3VsnbzOwysT9MaDf2TopangIzaA46Nr8FrWAG1dn5rsl0cA4oTyEhJ7dTvwIiBdplr+Mohx1gCrbt9egxLLSU0Zdmg5GDP0w7phPfsdFemmaDGQY4dZSbSyiC4SphmcQG3BdSHTbHuP7YtjrlVEHInzyw4ECAwEAARYHcGFzc3dkMTANBgkqhkiG9w0BAQQFAAOBgQBRGZNCm5tHfgio0B8GoF/kIVD1x51eR+vg4W67Wb1zbQEckyLVjauhdeVm264D5qpdVMePgCdhTVxgczUqamKhJ+A8JUl97oicZdtf0E1QbFifQI32mX0RL0xyRb2rqxGdsfKuXNYZGNTa5yOxT9Z//vO3Zd0/3sSgZ+RsLDD5Xg==
>
> with no newline at the end of the SPKAC line.
There should be the followng lines in issueCertificate:
81 ## Let's save the request body to a temp file
82 $tools->saveFile( FILENAME=>"$tempDir/${ser}.req",
83 DATA=>$req->getParsed()->{BODY}."\n" )
84 or configError( "Cannot write to $tempDir/${ser}.req" );
I know two possibilities for the error:
1. "\n" is missing after ->{BODY}
2. saveFile fails so you have to enter two "\n" after ->{BODY} ("\n\n")
Michael
--
----------------------------------------------------------------------------
Michael Bell Email: [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email (work):
[EMAIL PROTECTED]
Humboldt-University of Berlin Tel.(work): +49 (0)30-2093 2482
Unter den Linden 6 Fax.(work): +49 (0)30-2093 2959
10099 Berlin
Germany [OpenCA Core
Developer]
http://openca.sourceforge.net
S/MIME Cryptographic Signature
