Cedric Tabary schrieb: > > On Tue, Jul 30, 2002 at 02:05:41PM +0200, Michael Bell wrote: > > Cedric Tabary schrieb: > > > > > > I installed openca RC2 & openssl 0.9.7-beta2 > > > > > > When I click "Approve and sign request" in the RA I get the following > > > error (netscape 4.79): > > > > > > Error 6206 > > > General Error. Cannot build PKCS#7-object from extracted signature! > > > OpenCA::X509 returns errorcode ().. > > > > > > in apache log : > > > Signature OK > > > General Error Trapped 6206: Cannot build PKCS#7-object from extracted > > > signature! > > > OpenCA::X509 returns errorcode (). at > > > /usr/local/OpenCA/lib/functions/misc-utils.lib line 38. > > > Compilation failed in require at /usr/local/apache/cgi-bin/ra/RAServer > > > line 213. > > > > There is a bug in the errorreporting code of crypo-utils.lib. I fixed > > and attached it. You can find it in OPENCADIR/lib/functions/ > > > > Please try again and send me the output. > > Now I get : > > Signature OK > General Error Trapped 6206: Cannot build PKCS#7-object from extracted > signature! > OpenCA::PKCS7 returns errorcode 7911031 (OpenCA::PKCS7->new: Cannot > initialize signature (7912021) > OpenCA::PKCS7->initSignature: Cannot parse signature (7921021) > OpenCA::PKCS7->getParsed: The crypto-backend cannot verify the signature > (7742073) > OpenCA::OpenSSL->verify: openca-verify failed (35584): > .). at /usr/local/OpenCA/lib/functions/misc-utils.lib line 38. > Compilation failed in require at /usr/local/apache/cgi-bin/ra/RAServer > line 213.
This is the same errorcode like the one from Andrew Zhoglo. Massimiliano, do you know the code? This looks like a general mistake but I don't know what's going wrong. > I found the serial by hand because I don't know how to read the smime.p7m > attached to the mail (using mutt). smime.p7m is a S/MIME-mail. You need a compatible mailer. Which browser do you use with OpenCA? Normally the people use IE or Netscape - the mailprograms of both understand S/MIME v2. The serial which you found is the serial of the request! The serial of the certificate you can found via: Information --> certificate --> valid and then you see the issued certs with their serials. Best regards Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
