Re: [Openca-Users] Re: Re: Phase II - Error "Cannot encrypt PIN-mail" - Issue the certificate

Wed, 31 Mar 2004 15:35:38 -0800

Bram Ridder wrote:

Michael Bell wrote:

Bram Ridder wrote:

There is line with OpenCA::OpenSSL::SMIME->new. You have to enter the




parameter DEBUG like follows:

DEBUG => $self->{DEBUG},





Hi Michael,

thx for your response, but I'm a little confused. I did as you asked and changed the file /usr/local/openca/modules/perl5/OpenCA/Token/OpenSSL.pm :

from:
   my $self = {
               DEBUG     => 0,
               debug_fd  => $STDERR,
               ## debug_msg => ()
              };

to:
   my $self = {
              DEBUG => $self->{DEBUG},
               debug_fd  => $STDERR,
               ## debug_msg => ()
              };



This is the wrong position! Please look for a line with a constructor for OpenCA::OpenSSL::SMIME. The complete line is like follows:

my $smime = OpenCA::OpenSSL::SMIME->new(

There you have to add the code for DEBUG. The fixed code block looks like this:

        ## decryption
        my $smime = OpenCA::OpenSSL::SMIME->new(
                                 INFILE  => $infile,
                                 SHELL   => $self,
                                 ENGINE  => $engine,
                                 GETTEXT => $self->{gettext},
                                 TMPDIR  => $self->{tmpDir},
                                 DEBUG   => $self->{DEBUG}
                                 );

Please don't let you confuse by the comment #decryption. It is old and wrong but easy to search for you :)

Michael


Thanks for the extra info, seems I had edited the wrong file :x. I've done as you said, but the debug message appears much te same, have a look:

develop-bak:/usr/local/openca# writing RSA key
OpenCA::Token::OpenSSL->new: class instantiated<br>
OpenCA::Token::OpenSSL->new: crypto and name present<br>
OpenCA::Token::OpenSSL->new: NAME CA<br>
OpenCA::Token::OpenSSL->new: PASSWD_PARTS 1<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getReqAttribute<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getCertAttribute<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getNumericDate<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::setParams<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::issueCert<br>
Using configuration from /usr/local/openca/etc/openssl/openssl/CA_Operator.conf
DEBUG[load_index]: unique_subject = "yes"
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName :PRINTABLE:'NL'
organizationName :PRINTABLE:'OpenCA'
organizationalUnitName:PRINTABLE:'Internet'
commonName :PRINTABLE:'administrator'
serialNumber :PRINTABLE:'15'
Certificate is to be certified until Mar 28 12:29:27 2005 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getCertAttribute<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getCertAttribute<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::sign<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getCertAttribute<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getCertAttribute<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getPIN<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getDigest<br>
OpenCA::Token::OpenSSL->OpenCA::Token::OpenSSL: AUTOLOAD => OpenCA::Token::OpenSSL::getSMIME<br>
PKI Debugging: OpenCA::Token::OpenSSL error
PKI Debugging: Aborting all operations
PKI Debugging: Error: 8012006
PKI Debugging: Message: OpenCA::OpenSSL::SMIME->encrypt: unknown
problem encrypting (11).
PKI Debugging: debugging messages of OpenSSL token follow


I guess the problem lies somewhere else? Hope you've got some more ideas.

Thanks in advance, Bram :)


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Hi there,

seems I've fixed to problem :). I was using openSSL 0.9.7d and read your message about the bug it had. So I downloaded the fixed file and the installation works perfectly :)

Thanks for all your help and support!

Bram


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to