Hi Chirstian,

many, many thanks for the help. Unfortunately, it didn't work. :-(

We've tried to run the openca-sv manually (with a test file) and
that's what we got:

[Info]: Input file intialized.
[Info]: Signaturefile initialized.
[Info]: Reading Certificate file.
[Info]: PKCS#7 object loaded.
[Info]: Data is ready for verification.
[Info]: Signature Informations (PKCS#7):
Segmentation fault

Running the same command in a test machine (we're everything seems to
be in order and working just fine, and it's almost an image of the
other one) and returns as follows :

# /usr/local/OpenCA-0.9.2.5/openca/bin/openca-sv
verify -verbose -cf
/usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/crypto/cacerts/cacert.pem -cd
/usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/crypto/chain -data
/usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/tmp/testeee/REQUEST/ARCHIVED/teste.txt
-in
/usr/local/OpenCA-0.9.2.5/openca/OpenCA/var/tmp/testeee/REQUEST/ARCHIVED/teste.sig
[Info]: Input file intialized.
[Info]: Signaturefile initialized.
[Info]: Reading Certificate file.
[Info]: PKCS#7 object loaded.
[Info]: Data is ready for verification.
[Info]: Signature Informations (PKCS#7):
depth:1 serial:00 subject:CN=Certificate Issuer,OU=IC,O=Teste CA,C=BR
depth:0 serial:01 subject:serialNumber=1,CN=Usuário de
Teste,OU=IC,O=UFF,O=Teste CA,C=BR
[Info]: Signature is corrupt. Errorcode -1.
signature:error:-1
[Error]: Digest mismatch. Signature is wrong.

Again, thanks for the support.

Best whishes,
--Daniel



2006/12/4, Christian <[EMAIL PROTECTED]>:
> Hi Daniel,
>
> please find out where your "openca-sv" binary resides (`which openca-sv`
> or `find / -name "openca-sv"`)
> then check result against
> "OpenCA-DIR/etc/config.xml"
>
> should look like this
>        <option>
>             <name>USE_LOAS</name>
>             <value>yes</value>
>         </option>
>         <option>
>             <name>prefix</name>
>             <value>/usr/share</value>
>         </option>
>         <option>
>             <name>bindir</name>
>             <value>/usr/bin</value>
>         </option>
>
> If you want to have "openca-sv" in /usr/bin.
> normally it resides in PREFIX/bin
>
> "OpenCA-DIR/etc/token.xml"
> "OpenCA-DIR/etc/servers/node.conf"
>
> stop your server.
> fix mentioned files
> run configure_etc.sh again
> start your server again.
>
> should work, if not, come back ;)
>
> Best regards
> Christian
>
> Daniel Marques schrieb:
> > Dear friends,
> >
> > We're experiencing problems in the CA while importing RA request
> > certificates. The RA signature seems to be not recognized by the CA,
> > but all the other features works just fine.
> >
> > The error message informed by OpenCA is the following:
> >
> > http://www.ic.uff.br/~jacques/erro.jpg
> >
> > This message appears when we try to access a request by Information >
> > Certification Request > Approved  and check the RA Operator's
> > signature.
> >
> > The RA Operator certificate was issued by the CA without any problems.
> >
> > Any hints?
> >
> > Thanks,
> > --Daniel
> >
> > -------------------------------------------------------------------------
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to share your
> > opinions on IT & business topics through brief surveys - and earn cash
> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> > _______________________________________________
> > Openca-Users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/openca-users
> >
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Openca-Users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openca-users
>

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to