Hello there, On Thursday 06 November 2003 02:29, [EMAIL PROTECTED] wrote: > Is the auth key ID correct in your subordinate / chain?
The certificate in my chain file is the same as the cert in the cacert file. > Is the basic > constraints in the root or subordinate limiting your chain length? Basic Constraints for both Sub and Root CA are: Subject Type-CA Path Length Constraint=None > Is > the key useage correct in your subordinate CA? > Key usage (as viewed by IE) in Sub is: Certificate Signing, Off-line CRL Signing, CRL Signing (06) I have no idea if any of these would account for what I am seeing, but something else I have noticed is that I do get an error importing "all" into the RA: Importing valid CA_CERTIFICATE ... No objects are present Copying latest ca-certificate into the RAServer failed (from /usr/local/openCA/openca/var/tmp/tmp_10058/efeb2530e853a89d3be2b97c2246e8e2.pem to ). The CA cert is in the RAServer as I imported the config all OK. Chris... > Chris Covell wrote: > >Hello there, > > > >I am using 0.9.1-1 with a sub and root CA. When I try and sign a request > > (or test a certificate) as an RA Admin I get the following error: > > > >The PKCS#7-object signals an error. The signature is not valid. > > PKCS#7-Error 7932021: OpenCA::PKCS7->parseDepth: The chain is not > > complete. (6102) > > > >I thought this looks alot like the sort of Apache errors I was getting a > > while ago, so I added the root certificate to the: > > > >/usr/local/OpenCA/openca/var/crypto/chain/cacert.crt file on the RA, but > > this did not make any difference. > > > >Any ideas ? > > > >Chris... > > > > > >------------------------------------------------------- > >This SF.net email is sponsored by: SF.net Giveback Program. > >Does SourceForge.net help you be more productive? Does it > >help you create better code? SHARE THE LOVE, and help us help > >YOU! Click Here: http://sourceforge.net/donate/ > >_______________________________________________ > >Openca-Users mailing list > >[EMAIL PROTECTED] > >https://lists.sourceforge.net/lists/listinfo/openca-users > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Openca-Users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
