Hi there,
I'm trying to get openca running on my server for a week now, and I must say it's kinda fun =). I've
solved some problems with help from this mail-list. (Including switching to Debian Sarge :)). But I
guess I'm realy stuck now in the installation process :/. The problem is I can't issue the certificate for
the administrator in Phase II, first when I created a certificate and pressed 'Issue certificate' nothing
would happen but a white screen. After changing the servers/*.conf files from
openssl "openssl" to openssl "/usr/local/bin/openssl"
That problem was fixed, but another problem occured. The following message appeared on my
web-browser:
Error 6794*
General Error*. Cannot encrypt PIN-mail! Aborting!
OpenCA::OpenSSL returns errorcode 8012006 (OpenCA::OpenSSL::SMIME->encrypt: unknown problem encrypting: )..
And in my console I get the following message:
writing RSA key
Using configuration from /usr/local/openca/etc/openssl/openssl/CA_Operator.conf
DEBUG[load_index]: unique_subject = "yes"
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName :PRINTABLE:'NL'
organizationName :PRINTABLE:'OpenCA'
organizationalUnitName:PRINTABLE:'Internet'
commonName :PRINTABLE:'administrator'
serialNumber :PRINTABLE:'9'
Certificate is to be certified until Mar 18 18:11:08 2005 GMT (365 days)
Write out database with 1 new entries Data Base Updated
So I would suggest it would work, but obviously it doesn't :/.
I double-checked my configuration files and this mailing list, but I couldn't find a awnser to this problem.
+---------------------------------------------+
Some info about my config:
Module Version OpenSSL 0.9.103 Tools 0.4.3 DB 2.0.5 Configuration 1.5.3 TRIStateCGI 1.5.5 REQ 0.9.54 X509 0.9.52 CRL 0.9.22 PKCS7 0.9.17
Configured with:
PREFIX=/usr/local/openca
./configure \ --with-httpd-user=wwwuser \ --with-httpd-group=pki-group \ --with-openca-prefix=${PREFIX} \ --with-httpd-fs-prefix=/usr/local/apache \ --with-openssl-prefix=/usr/local/openssl \ --with-module-prefix=${PREFIX}/modules \ --with-engine=no \ --with-web-host=ridder.gods.nl \ --with-ca-organization="OpenCA" \ --with-ca-country=NL \ --with-ca-locality=Huizen \ --with-hierarchy-level=ca \ --with-service-mail-account="[EMAIL PROTECTED]"
I'm using the DB instead of the DBI config. I'm not sure if that's part of the problem, if
so tell me :).
Any suggestions would be great! Thanks in advance,
Bram Ridder
Bram Ridder wrote:
> Hi there,
> > I'm trying to get openca running on my server for a week now, and I must > say it's kinda fun =). I've
> solved some problems with help from this mail-list. (Including switching > to Debian Sarge :)). But I
> guess I'm realy stuck now in the installation process :/. The problem is > I can't issue the certificate for
> the administrator in Phase II, first when I created a certificate and > pressed 'Issue certificate' nothing
> would happen but a white screen. After changing the servers/*.conf files > from
> > openssl "openssl"
> to
> openssl "/usr/local/bin/openssl"
> > That problem was fixed, but another problem occured. The following > message appeared on my
> web-browser:
> > Error 6794*
> General Error*. Cannot encrypt PIN-mail! Aborting!
> OpenCA::OpenSSL returns errorcode 8012006 > (OpenCA::OpenSSL::SMIME->encrypt: unknown problem encrypting: )..
Looks like you are using a 0.9.2 snapshot or RC. Please check etc/token.xml. There you have to check the path to OpenSSL's binary but this cannot be the problem if the issuing of the certificate works.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
Bram Ridder wrote:
> Hi there,
> > I'm trying to get openca running on my server for a week now, and I must > say it's kinda fun =). I've
> solved some problems with help from this mail-list. (Including switching > to Debian Sarge :)). But I
> guess I'm realy stuck now in the installation process :/. The problem is > I can't issue the certificate for
> the administrator in Phase II, first when I created a certificate and > pressed 'Issue certificate' nothing
> would happen but a white screen. After changing the servers/*.conf files > from
> > openssl "openssl"
> to
> openssl "/usr/local/bin/openssl"
> > That problem was fixed, but another problem occured. The following > message appeared on my
> web-browser:
> > Error 6794*
> General Error*. Cannot encrypt PIN-mail! Aborting!
> OpenCA::OpenSSL returns errorcode 8012006 > (OpenCA::OpenSSL::SMIME->encrypt: unknown problem encrypting: )..
Looks like you are using a 0.9.2 snapshot or RC. Please check etc/token.xml. There you have to check the path to OpenSSL's binary but this cannot be the problem if the issuing of the certificate works.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
Hi Michael,
Thx for the reply. I've done as you said and recieved the following error:*
General Error*. Cannot encrypt PIN-mail! Aborting
OpenCA::OpenSSL returns errorcode 8012006 (OpenCA::OpenSSL::SMIME->encrypt: unknown problem encrypting (11). )..
Not sure what it means, but the messages in my console remain the same, hope you've got something to work with.
Thx in advance, Bram Ridder
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
