Me again again,
2 problems on the RA node interface :
1.
Using Administration/Backup and Recovery/Recovery/Rebuild OpenSSL's
database and next serialnumber, I have got the following error message:
"Cr�ez des sauvegardes de index.txt et du num�ro de s�rie ...
/usr/local/openra921/openca/var/crypto/index.txt
/usr/local/openra921/openca/var/crypto/serial
Chargement des Objets ...
CERTIFICAT_AC_VALIDE: 7FFFFFFF
Erreur 700
Erreur G�n�rale The compilation of the command
cmdRebuildOpenSSLindexDB failed. panic: array extend
at /usr/local/openra921/openca/lib/functions/crypto-utils.lib line 369."
I only got this message with the RA of the Root CA and not with RAs
linked with subCAs. This makes me think that there is a problem with the
Root CA certificate. I noticed that for the self-signed Root CA
certificate, the serial number is always 0 (first certificate signed by
the CA) and this may be the problem because, for a subCA, the serial
number of the subCA is never 0 but at least 1. I do not see how to avoid
the 0 serial number to prove that it is my problem (except modifying the
code but I am not a perl guru to say the least...).
2.
Using Utilities/E-Mail new users, I always got :
"Sending the Certificate-Information-Mails ...
Didn't find new mails. No mails send!
Sending the PIN-Mails ...
Didn't find new mails. No mails send!"
even if I did not choose the option send mail automatic which should mean that,
from time to time, I would have to use this function to inform users.
On the other hand, the function "Send a CRIN-mail" works well.
NB. I could not use the "E-Mail new users" and "Send a CRIN-mail"
options on the RA node interface until I modified the acl.xml file :
<module>(1|3)</module>
<role>.*</role>
<operation>mail send</operation>
<owner>.*</owner>
default is <module>1</module> which means that you cannot send email
from the RA node. Is this default setting correct?
Openca Configuration :
version 0.9.2.1 running on a Debian Sarge
CA offline
RA/Pub online
OpenSSL 0.9.135.2.1 - Tools 0.4.3 - DB 0.9.115.2.3 - Configuration 1.5.3
- TRIStateCGI 1.5.5 - REQ 0.9.61 - X509 0.9.57 - CRL 0.9.24 - PKCS7
0.9.19
Thanks,
Pierre
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
