Hello, me again :)
Still got a few problems with the RA interface:
1.
When I try to view the CRLs using Information/CRLs/All
I can see the different CRLs created so far, but when I choose one of
these CRLS, I can not see any listing of the revocated certificates per
serial numbers and thus I can not access the details of these
certificates which is quite annoying.
Example of CRL display in OpenCA:
"CRL Version 2 (0x1)
CRL Algorithm md5WithRSAEncryption
Issuer serialNumber=2,CN=IPdiva subCA02,OU=securite,O=IPdiva,C=FR
Last Update Apr 25 08:46:47 2005 GMT
Next Update May 25 08:46:47 2005 GMT"
I have got the same problem in Mozilla FireFox : I can easily install a
CRL (using Pub Interface/Ca Infos/Certificate Revocation Lists/OpenCA's
CRL (browsable Importable CRL - DER)), and I can check that the status
of a certificate installed in the browser changed to <revocated> if this
certificate is on the CRL just imported. But I cannot see the details of
the CRL but instead just a listing of the different CRLs installed in
the browser so far (Edit/preferences/advanced/managed CRLs...). Is that
normal ?
2.
When I list the CA certificates details (Information/CA Certificates) I
have got a CSR serail number = -1 for every first CA certificate I
issued on many installation so far. I don't know if it is correct
because I have the following error message when I click on the CA's
CSR's Serial Number:
Erreur 6295035 General Error - Cannot load CSR -1 from the database.
3.
Using Utilities/Search CSR, I have got the following errors message
whatever input I try:
"Erreur 700
Erreur G�n�rale Permission refus�e! Ce n'est pas permis de chercher
d'autres objets que les certificats sur ce serveur."
(which roughly means in english: General error, permission refused!
You are not allowed to search other objects than certificates on
this server.)
I checked ACL rights but it does no seem to be the problem.
Openca Configuration :
version 0.9.2.1 running on a Debian Sarge
CA offline
RA/Pub online
OpenSSL 0.9.135.2.1 - Tools 0.4.3 - DB 0.9.115.2.3 - Configuration 1.5.3
- TRIStateCGI 1.5.5 - REQ 0.9.61 - X509 0.9.57 - CRL 0.9.24 - PKCS7
0.9.19
That's all folks! (and that's a lot),
Pierre
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
