-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Hello,
I am running the current version of openca in a test environment.
When I go to the public Interface an do "Request a hardware token" I
fill in my personal data.
Back at the RA interface, I would choose this request and then get the
button "Generate a private key". This button is great! :-) The RA
start the process of enrolling a smartcard for my request.
But when I hit the button, I get an error: 6296060. I also took a look
at var/log/stderr.log but got no clue.
I know that this would be an issue due to the acls. So I also
investigated the xml-logs and realized, that openca is doing a
basi_csr-command when hitting this button. So I changed the
acl.xml.template to:
<permission>
<module>(0|@ra_module_id@|@pub_module_id@)</module>
<role>.*</role>
<operation>csr new</operation>
<owner>.*</owner>
</permission>
Fine. Now I would be allowed to do the new csr in my ra interface.
Changed everything, restarted.
Hit the button again and:
I get a completely new form for a new csr with empty fields.
I expected to generate keys for this token request, that was issued
from the pub interface.
How do i have to proceed?
Kind regards
Cornelius
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEcrTmtVsWxaSPzvkRA2LqAKCp+5qIZKVBT806xVl74K04O4zJVgCdGtcY
02n7qgg3aBR+ykl4f8rx8Co=
=4voh
-----END PGP SIGNATURE-----
-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users