Hi! I already replied directy to Michael Bell but he is apparently busy and time is pressing on me a bit =o(((
On Mon, Feb 17, 2003 at 11:27:10AM +0100, Michael Bell wrote: > > > > The only way to get this request (and then to import certificate) is to > >copy'n'paste it from window shown by GUI client of FW-1 In this GUI (called Smart Dashboard) i can generate request but there is no option to save generated request to disk. I can only view it in a window, copy it and paste to some text file. > I was little bit shocked by the name of the file but I test it (look in > a dictionary what a panzer in german is ;) ). I have no problems with > the request. I used the link "Server Request" for PKCS#10 requests and > it worked without any problems. > > What did you do exactly? It looks like a problem with your installation I did exactly the same. I used "Server Request" link, pointed to right file, pushed Continue, next page showed correct DN of the request and after i push Continue again i get the Error 978 screen. Now. I don't know if this is related in any way but: I used Mozilla 1.3b to generate certificate request. I used "Request certificate with automatic browserdetection", filed up needed info. Than i proceeded to RA part to aprove the request. I can see that it's Request version 1 Serial number 5152 Request Type SPKAC Now when i push Approve and sign request i got this in Apache error.log: Error loading SPKAC 24185:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:138: 24185:error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header:tasn_dec.c:928: 24185:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:304:Type=NETSCAPE_SPKI (the above is put 4 times in the error.log) and in a browser (this part was done using Explorer 6.0.26000) in the main window i got only blank screen. The request is still not approved of course. This same situation persists whenever someone uses other versions of Netscape, Mozilla or Galeon =o( Is all this cause by some misconfiguration in OpenCA or is it OpenSSL itself? TIA -- Robert Ramiega <[EMAIL PROTECTED]> RR282-RIPE Security Team Leader | Systems Administrator TDC Internet Polska SA | PDi Ltd ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
