On Wed, Feb 07, 2007 at 04:54:22PM +1300, Chris wrote:
> Date: Wed, 7 Feb 2007 16:54:22 +1300
> From: Chris <[EMAIL PROTECTED]>
> To: [email protected]
> Subject: [Openca-Users] CA to RA Synchronisation via scp fails
> 
>    I got a test setup on two different machines- RA server and CA Server.
>    When I'm trying to synchronize them via scp (CA Enroll all to lower..., as
>    in user docs), the .tar file is being generated, but I get the following
>    error:
 [ skip ]

> 
>    Host key verification failed.
> 
>    lost connection
> 
>    When running this command locally, everything works fine, and the data can
>    be imported into the RA. I did a chmod 777 -R to the /var/www/.ssh/ (u
>    never know...), which didn't help, either.

  Have you ran this command locally as root user or as openca user? Make
sure /var/www/.ssh/known_hosts actually contains RA host key and is
readable by openca proccess, eg have root:openca perms. and 0640 access
mode.

BTW I wouldn't use home directory for the openca user /var/www. Since
$HOME/.ssh contains private key without password, I would set
/var/lib/openca (or whatever where you installed openca to) for the home
dir and make sure private key is readable by openca only.

-- 
Alexei Chetroi

Smile... Tomorrow will be worse. (c) Murphy's Law

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to