Cedric Tabary schrieb: > > Now I get : > > Signature OK > General Error Trapped 6206: Cannot build PKCS#7-object from extracted > signature! > OpenCA::PKCS7 returns errorcode 7911031 (OpenCA::PKCS7->new: Cannot > initialize signature (7912021) > OpenCA::PKCS7->initSignature: Cannot parse signature (7921021) > OpenCA::PKCS7->getParsed: The crypto-backend cannot verify the signature > (7742073) > OpenCA::OpenSSL->verify: openca-verify failed (35584):
It takes some time but now I can get this error too. The errormessage is wrong because I made a mistake in the code which extracts the signature from the submitted form. I made several fixes in the CVS (crypto-utils.lib, approveCSR and REQ.pm). I think your browser don't sign the request. The correct errorcode woud be 6203. (I actually update the OpenCA-guide too.) So here some helpful questions: 1. Does you import the CA-cert into your browser? (If you import your certificate via a PKCS#12-file from OpenCA then the CA-cert is already installed.) 2. Do you trust the CA? If you don't accept the CA then your browser don't use the CA-cert. (Netscape->Security->Certificates->Signers->Your CA->Accept ...) Best regards Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
