Thanks Robert, it's working now. I removed all the openCA and openssl modules with yast and also did a search for openca and OpenCA files and removed all of them! I then re-installed OpenCA from scratch. The only problem I had is that I had to manually chmod 777 on the tmp and crypto directory, as it was complaining that it couldn't access files in there. Many thanks for your help Oleg
From: "Robert Esterer" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Date: Thu, 20 Nov 2003 11:42:07 +0100 Subject: [Openca-Users] =?iso-8859-1?Q?AW:_=5BOpenca-Users=5D_Re:_Can't_sign_certificates_=A0_?= Reply-To: [EMAIL PROTECTED] Hi Oleg, I got my CA working, but only by reinstalling it. I don=92t know what exactly the problem was but here is what I know: I added several log entries to the crypto-utils.lib to trace the issuing process. What I found was that when the CA tried to compare the enddate of the certificate to be issues with the CA's root cert it got stuck. That was cause by the cryptoshell which returned nothing when asked for the enddate of the root cert. The perl interpreter got stuck when trying to reformat the given enddate. It didn't cause any error and nothing was logged anywhere (including the apache error logs), perl just got stuck. When I looked for the openssl perl lib I found 2 of them. I don=92t know exactly where the other perl lib came from. Maybe a leftover from the snapshot isntallation I had before or, more likely, it was the lib from the openCA-perl packages which are part of suse 8.2. don=92t know why my ca always used the wrong one. Anyway, I removed the suse packages and also removed all openCA files and reinstalled it (since I didn=92t clean after installing I just had = to do make install-ca again) and now it works fine. I hope this helps. Best regards, Robert ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
