Another solution would be to actually "EDIT CERTIFICATE" on the RA and set the LOA to another value manually before you approve the certificate. Thats quicker if you only have a few requests.
Regards Michael
Til Obes wrote:
Disable loa, if you dont need it.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stefan Radovanovici
Sent: Tuesday, July 27, 2004 12:31 PM
To: [EMAIL PROTECTED]
Subject: [Openca-Users] openca and Cisco VPN 3005 identity certificate problem
Hey all,
I am having the following problem. I have a running installation of openca. On my Cisco 3005 concentrator I have installed the root CA, no problems. Now I need to create an indentity certificate for the cisco.
I have tried with scep first, the enrollment goes fine, the cisco submits the CSR to openca, openca approves it automatically (which I think it's normal). But then when I go into the CA admin interface -> Active CSR -> Approved -> Cisco's CSR and I hit the "Issue Certificate" button, I get back the following error:
"Error 6731 General Error. This request has no Level of Assurance specified.."
I have also tried to use the 3005's interface to create the CSR manually. It goes well, the CSR is generatated, saved to a file. I then go to the openca Pub interface, issue a server CSR, I import the file. I have the posibility here to specify a LOA so I do. I submit the CSR, I go in the RA, I approve the CSR, I go in CA at the same location as above (the approved CSRs) but when I hit the "Issue Certificate" I get the exact same error, with the Level of Assurance.
Any ideas ? I assume that if I do the initial CSR from the openca's pub interface, it would work. But apparently the 3005's insists that the initial CSR is created on itself.
Thanks, Stefan
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
-- accom GmbH & Co. KG Gruener Weg 100 52070 Aachen
Tel: +49 241 918 5228 Fax: +49 241 918 5299
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
