Benjamin,
Do you know something about this following other errors?

1)
If I try to send email to users I get

Error 6296060
General Error Permission denied.

Not sure, but sounds like a file that the httpd server user can not access.

2)
RA->Information->CRLs->all

Error 700
General Error The compilation of the command cmdCrlList failed. Can't use an undefined value as an ARRAY reference at (eval 116) line 75.

I posted a patch for this error last week, check out the bug list on sourceforge.

I have some little questions about openca.

After Configuration of of Email-Service I now get emails from the system. The mail which contains the revocation PIN "OpenCA Certificate and PIN information"-mail is encrypted? How shall I read this one?

The user has the private key (as they generated the key) and so they can open the encrypted file. That is the theory.


And Yes. I get above Error 6296060 _after_ mail config.
How can a user revoke a cert, if he never gets th revocation pin?

You can initiate a revocation at the RA by an RA operator.

If I transfer ALL data between CA and RA my cacert.der/cer/txt will be overwritten with 0 Byte files. This is not what should happen?
I always have to fix this by hand.

this is not right. is this because you have not got the cacert.der file written to the crypto directory on the RA ? Or the CA. Is this part of your permissions problem, tjhat you have edited something as root and now the apache user can not write to it ? Check the ownership of the certificate files in ../var/crypto/.

Chris...


-------------------------------------------------------
SF.Net email is sponsored by: GoToMeeting - the easiest way to collaborate
online with coworkers and clients while avoiding the high cost of travel and
communications. There is no equipment to buy and you can meet as often as
you want. Try it free.http://ads.osdn.com/?ad_id=7402&alloc_id=16135&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to