Hi Yihua,
As a simple temporary work around:
Use Firefox (Mozilla), instead of MS IE,
while approving and signing request by
RA operator.
Request itself could be meant for IE.
This will solve issues which you demonstrated
at demo2. But will not solve issues with v3
extensions.
Regards, Sergei
жёрю╩╙ wrote:
жёрю╩╙ wrote:
Hi,Sergei
I tested the "Approve Request" problem for chinese on
http://demo2.openca.info
I use two way to approve the request.
One is the directly "Approve Request",It works very well.
you can see the result "Information"->"Certificate
Requests"->"Archived"->Serial(24864)
another way is to "Edit Request" and change the value "name(first and
lastname)",
then press "Approve Request" button.now it don't work. and show below
errors:
**************************************************************
Error 6206
*General Error* Cannot build PKCS#7-object from extracted
signature!
OpenCA::PKCS7 returns errorcode 7911031 (OpenCA::PKCS7->new:
Cannot initialize signature (7912021).
OpenCA::PKCS7->initSignature: Cannot
parse signature (7921021). OpenCA::PKCS7->getParsed: The
crypto-backend
cannot verify the signature (7742075). OpenCA::OpenSSL->verify:
openca-sv
failed. [Error]: error:04077068:rsa routines:RSA_verify:bad
signature
[Info]: Input file intialized.
[Info]: Signaturefile initialized.
[Info]: Reading Certificate file.
[Info]: PKCS#7 object loaded.
[Info]: Data is ready for verification.
[Info]: Signature Informations (PKCS#7):
depth:1 serial:FA825EAEB7C28894 subject:emailAddress=
[EMAIL PROTECTED],CN=Demo CA,O=Cryptocom Ltd,C=RU
depth:0 serial:3F
subject:serialNumber=63,CN=╖ь╖в╖Б╖П╗m╗],OU=Internet,O=Cryptocom Ltd,C=RU
[Info]: Signature is corrupt. Errorcode -1.
signature:error:-1
).
**************************************************************
If you want to try this,you can see the CSR on "Active
CSRS"->Pending->Serial(25089,25601,25888).
So maybe the problem is not result from "Two Words",But from another
reasons!
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
