Hi Barbara,

As far as I know "download certificate onto token" only works with
Netscape/Mozilla. I always use "Get Requested Certificate" in pub with
IE.
Did you generate the key on the token or on the ca? If you did the
latern then just download it as pkcs#12 file and import key +
certificate using mozilla.

Debug for the CA can be activated in cgi-bin/ca/ca. just search for
DEBUG and set it to 1, that'll activate all debug output for any CA
activity. But beware, turning debug on prevents you from downloading
files, or at least it did to me.

Hope this helps,

-Robert

-----Urspr�ngliche Nachricht-----
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag von Barbara
Post
Gesendet: Dienstag, 9. Dezember 2003 17:56
An: [EMAIL PROTECTED]
Betreff: [Openca-Users] Download certificate onto token


Hi,

What configuration should I check to be able to make "download
certificate onto token" work ? I use openca 0.9.1.3 on FreeBSD 5.1, and
client-side Internet Explorer 6 SP1 which says "Internal Server Error
The server encountered an internal error or misconfiguration and was
unable to complete your request." but Apache's log doesn't help, Mozilla
Firebird 0.7 which doesn't say anything, and an USB token, which drivers
are installed onto my computer.

The direct handling of generated certificate to the token is critical
for my project. (I'll remove the option of direct download).

Apache's SSL access log says :

[09/Dec/2003:18:25:47 +0100] 192.168.1.38 - - "POST
/cgi-bin/ca/ca?cmd=viewCert&dataType=VALID_CERTIFICATE&key=1 HTTP/1.1"
684 (with IE)

[09/Dec/2003:18:45:05 +0100] 192.168.1.38 - - "POST
/cgi-bin/ca/ca?cmd=viewCert&dataType=VALID_CERTIFICATE&key=1 HTTP/1.1"
1891 (with Firebird)

How can I enable debug for openCA please ? (where in wich configuration
file ?). I don't have any logs for openCA...

Since I have installed CA and RA on the same machine, I have initialized
CA but not RA, and am in the final step of producing CA operator
certificate, which I want to put on a security token like every future
certificate. I am not sure whether RA works ok, however. How to check it
?

Thanks a lot for your help.

Barbara Post



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program. Does
SourceForge.net help you be more productive?  Does it help you create
better code?  SHARE THE LOVE, and help us help YOU!  Click Here:
http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to