Hello!

First of all, congratulations to all the OpenCA team for this great piece
of software. I have spent last few weeks working with OpenCA 0.9.1-7,
creating CAs and Sub-CAs smoothly ;-) But now I have a problem and i can't
find a solution :(

My problem is very close to the one exposed in this thread:

[Openca-Users] Problem with verify signatures in Sub-CA
http://www.mail-archive.com/[EMAIL PROTECTED]/msg03728.html

But it cames when i use the batchprocessor. This is the sequence of steps
that I do:

I create the CA, and sign its certificate in the Root CA, then I import
the signed cerficate, and rebuild the chain (after copying root-ca.crt to
the chain directory)

Create the new CA manager certificate and install it to the navigator
(Mozilla).

In the batchproccesor...

Import user list
Import permissions
New key-lifecycle
Create PINs
Export PINs
Create new key pairs
Backup key pairs
Create requests

and Approve requests. And when i see the approved request list, i get this
message in all entries:

Cannot determine certificate from signature!

If I try to issue the pending certificates i get an endless loop that
gives me this errors:

CSR 512 ignored because the verification of the signature fails. Error:
6102. The PKCS#7-object signals an error. The signature is not valid.
PKCS#7-Error 7932039: OpenCA::PKCS7->parseDepth: There is a problem with
the verification of the chain (        error:2:unable to get issuer
certificate).

CSR 512 ignored because the verification of the signature fails. Error:
6102...
...
...

Any idea?

Best regards... Thanks in advance.

PD: When i try to get the user list from the batchproccesor, i get a
random list, with wrong IDs �?

PD2: Sorry... my englisgh is far from perfect :-P

-- 
Antonio Perdices Gonz�lez
---
CriptoLab. Despacho 5212.
Facultad de Informatica.
Campus de Montegancedo S/N
Universidad Polit�cnica de Madrid.
Boadilla del Monte. Madrid (Spain)




-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to