Stefan Radovanovici wrote:

Hey all,

I am having the following problem. I have a running installation of openca. On my Cisco 3005 concentrator I have installed the root CA, no problems. Now I need to create an indentity certificate for the cisco.

please use the ra/ca behavior of the cisco, we don't support direct ca-certs for scep right now


I have tried with scep first, the enrollment goes fine, the cisco submits the CSR to openca, openca approves it automatically (which I think it's normal). But then when I go into the CA admin interface -> Active CSR -> Approved -> Cisco's CSR and I hit the "Issue Certificate" button, I get back the following error:

"Error 6731
General Error. This request has no Level of Assurance specified.."

yeah thats simple ,o) - you just hit the edit button at the ra once and save it again - than an loa is inserted - or if you don't need an loa, just disable loa support in the config files...

this is a 'bug' the scep-interface doesn't set an initial loa value if it inserts the new request into the system, i think we introduced the loa stuff later, pls file a bug for this, 'workaround' is above ,o)


greetings dalini

--
Ives Steglich                Email: [EMAIL PROTECTED]
System Administration        Tel.:  +49 (0)3677 - 69 4382/4383
                             Fax:   +49 (0)3677 - 69 4399

Fraunhofer Institute for Digital Media Technology
Langewiesener Strasse 22
98693 Ilmenau                Email (private): [EMAIL PROTECTED]
Germany                      http://www.openca.org


------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to