Hi,
I'm evaluating OpenCA 0.9.2-RC4 and can complete the Phase I install, but in Phase II when I try to issue "First User" certificate, this error happens:

8<------------------------------------------------------------------------

General Error. Cannot create X.509 object from CA certificate (7411011). OpenCA::X509->new: Cannot open infile /usr/local/openca/openca/var/crypto/cacerts/cacert.pem for reading..
8<------------------------------------------------------------------------

this is the ..../cacerts/ directory content

lrwxrwxrwx    1 root     wwwdata        10 May 13 18:39 bp_cert.pem -> cacert.pem
lrwxrwxrwx    1 root     wwwdata        10 May 13 18:39 cacert.cer -> cacert.der
lrwxrwxrwx    1 root     wwwdata        10 May 13 18:39 cacert.crt -> cacert.pem
-rw-r--r--    1 wwwdata  wwwdata      1903 May 14 14:36 cacert.pem.24968_old
lrwxrwxrwx    1 root     wwwdata        10 May 13 18:39 keybackup_cert.pem -> cacert.pem
lrwxrwxrwx    1 root     wwwdata        10 May 13 18:39 log_cert.pem -> cacert.pem

there is an old certificate but no .pem certificate, and all the symlinks are invalid...... I then copy the cacert.pem.24968_old to cacert.pem and try to generate the certificate, but this error happens....

8<------------------------------------------------------------------------
General Error. Cannot encrypt PIN-mail! Aborting!
OpenCA::OpenSSL returns errorcode 8012006 (OpenCA::OpenSSL::SMIME->encrypt: unknown problem encrypting (11). )..
8<------------------------------------------------------------------------

the cacert.pem certificate don't have the private key to sign..... is the plain ca certificate...
at this point i'm stoped.... some advice ??

TIA

PD: Test system:
Debian 3.0 sarge
Perl 5.8.3
OpenSSL 0.9.7d
OpenCA 0.9.2-rc4

-- 
:: Nelson ::

begin:vcard
fn:Nelson Fernandez
n:Fernandez;Nelson
org;quoted-printable;quoted-printable:Subsecretar=C3=ADa de la Gesti=C3=B3n P=C3=BAblica;Oficina Nacional de Tecnolog=C3=ADas Inform=C3=A1ticas
adr;quoted-printable;quoted-printable:;;Avda. Roque Saenz Pe=C3=B1a 511;Ciudad Aut=C3=B3noma de Buenos Aires;;;Argentina
email;internet:[EMAIL PROTECTED]
tel;work:4343-9001 int 538
x-mozilla-html:FALSE
url:http://www.pki.gov.ar
version:2.1
end:vcard

Reply via email to