Hello,
Requests in IE are NOW CORRECT:
> (from -error_log:
> 11189:error:0906D06C:PEM routines:PEM_read_bio:no start
>line:pem_lib.c:622:Expecting: CERTIFICATE REQUEST
It's due to missing:
-----BEGIN CERTIFICATE REQUEST-----
and -----END CERTIFICATE REQUEST-----
so as you fill something like:
$txt .= "-----BEGIN CERTIFICATE REQUEST-----\n";
$txt .= "$request";
$txt .= "-----END CERTIFICATE REQUEST-----";
into OpenCA/lib/cmds/ie_req (instead of only $txt .= "$request"; line cca 260) or
somewhere else :-).
you can see success too.
(don't forget read/use my yesterday notices (in this mail)).
Good luck,
--mh
--
---------------------------------------------
Miroslav Hrad
mobil: +420 606 703435, email: [EMAIL PROTECTED]
[EMAIL PROTECTED], www.expedice.info
On Tue, 19 Mar 2002, Miroslav Hrad wrote:
> Hello,
>
> I'm running the OpenCA SNAP-20020315 and I can't make a request using IE too.
> ----
>
> I tried it at WIN98 in IE 5.50 - and the page 'ie_confirm.html' (at
>lib/servers/pub/sheets) produce error in a JavaScripts.
> I found that this error is called by lines (cca line 42 at ie_confirm.html):
>
> if (document.forms[0].ou.value != "")
> szName = szName + "; OU=" + document.forms[0].ou.value;
>
> ----
>
> I think it's usefull to set:
> certHelper.GenKeyFlags to certHelper.GenKeyFlags =0x04000003; (now it's
>0x04000001)
> 04000001 ... private key is store in registrs of Windows (it's security hole) and
>no user password to encrypt (everbody who have access to computer can sign by this
>private key) !!!
> 04000003 ... private key (can be) is ecrypted (RSA), stored, exportable
>
> ----
> I changed the lines at ie_confirm.html and I moved to next step:
> Now, I see Error 700: Error while creating REQ object. :-(
>
> (from -error_log:
> ...
> 11189:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:622:Expecting:
> CERTIFICATE REQUEST
> General Error Trapped 700: Error while creating REQ object. at
>/usr/local/Authority/OpenCA/lib/functions/misc-utils.lib line 32.
> Compilation failed in require at /var/www/cgi-bin/cgi-public/pki line 195.
> )
>
> However, I havn't this error message by requesting in Netscape.
>
> ----
>
> Have you any suggestion?
>
> Thanks,
>
> --mh
>
>
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
