Ives Steglich wrote:
Konstantin Khrooschev wrote:
didn't help. at least no changes detected in sscep session.
k, i just did some testing with cvs version and - its working:
setup
- no pwd, plain text key (pem formated, like mod_ssl)
certificate the same
mv key.pem key.pem.save openssl rsa -in key.pem.save -out key.pem is that anough ?
- sscep with attached configuration
check if you have disabled serial numbers in issued certificates cn, this would at least interfear sscep, since it checks the cn of the request with the cert and if not matching doesnt accept the cert
----------------
Certificate Version 3 (0x2) Serial Number 11 Common Name n/a E-Mail n/a Distinguished Name unstructuredName=ats-1605-1.rtsnet.ru
O=RTS Stock Exchange
L=Moscow
C=RU Role VPN Server Fingerprint SHA1:51:09:5C:0B:D8:E0:20:CA:CB:AA:0A:C6:CD:06:8E:CF:04:9B:04:0C Issued by [EMAIL PROTECTED]
CN=RTS Private CA
O=RTS Stock Exchange
C=RU Valid From Jul 21 13:13:41 2004 GMT Expiration on Jul 21 13:13:41 2005 GMT Current Status Valid Netscape CA Revocation Url http://pub.ca.rtsnet.ru/pub/crl/cacrl.crl Netscape Cert Type SSL Server
...
--------------------------------------------------
what shows you the scep command if you call it in a browser like:
http://domain/pub/cgi-bin/scep/scep for example
Error 700
*General Error*. This interface is only for SCEP..
------------------------------------------------------------------------
so this can be just a little configuration problem, it has been always a little configuratin problem, all cases i got solved, so this one too i hope... will make it to an successful end ,)
oh yeah - what apach version do u use?
Server version: Apache/1.3.26 (Unix) Debian GNU/Linux
-- Konstantin Khrooschev. RTS Stock Exchange. Network Department.
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
