And finally solved :-)

I formerly changed the PIN.

BUT

I would recomment, when the PIN has been changed on the RA/Public Node,
the new issued certificate SHOULD have the recent PIN of the old expired
certificate.
Otherwise the PIN can easily be lost and the new certificate will become
unusable!!

Regards

Ralf


> Ralf Hornik Mailings schrieb:
> Appendum:
>
> the public_key fields are both the same (old cert and new). Only the
> private key differs but is encrypted.
>
> However, the private key from the expired cert I can decrypt using my
> known PIN, but the new ones private key I cannot.
>
> It schould be the same encrypted private key as the old one, because I did
> not generate a completely new keypair. I used the old request for the new
> certificate.
>
>> Ralf Hornik Mailings schrieb:
>> Hi,
>>
>> after my RA (Registration Authority Administrator) certificate has been
>> expired, I tried to renew it. Now, I cannot download the new RA
>> certificate using the known PIN.
>>
>> In the Mysql database, the keys from the old cert and new are different.
>> Shouldn't they be equal?
>>
>> Same happened with the CA (Certification Authority Administrator)
>> certificate. I only renewed the old requests and singned them again.
>>
>> What could be the problem?
>>
>> Thanks for any suggestions
>>
>>
>> Regards
>> Ralf
>>
>>
>>
>>
>> --
>>
>>
>>
>> -------------------------------------------------------------------------
>> This SF.net email is sponsored by: Splunk Inc.
>> Still grepping through log files to find problems?  Stop.
>> Now Search log events and configuration files using AJAX and a browser.
>> Download your FREE copy of Splunk now >>  http://get.splunk.com/
>> _______________________________________________
>> Openca-Users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/openca-users
>>
>
>
> --
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Openca-Users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openca-users
>


-- 



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to