Dear list,
I'm having problems enrolling data from CA (offline-node) to RA
(online-node). Once I choose "Node-Ops" -> "Import/Export Data",
"Enroll data to lower level of the hierarchy"->"All" I got the
following error message
****
Exporting @enroll certificate_sta...@_certificate ...
Exporting all necessary objects.
FAILURE: 1 (pem).
FILE:
/usr/local/openca/var/openca/tmp/tmp_19553/certificate_sta...@_certificate/@enroll/1.pem
FAILURE: 2 (pem).
FILE:
/usr/local/openca/var/openca/tmp/tmp_19553/certificate_sta...@_certificate/@enroll/2.pem
Exporting @enroll csr_sta...@_request ...
Exporting all necessary objects.
FAILURE: 256 (pkcs#10).
FILE:
/usr/local/openca/var/openca/tmp/tmp_19553/csr_sta...@_request/@enroll/256.pkcs#10
FAILURE: 512 (pkcs#10).
FILE:
/usr/local/openca/var/openca/tmp/tmp_19553/csr_sta...@_request/@enroll/512.pkcs#10
Exporting @enroll ca_certificate_sta...@_ca_certificate ...
Exporting all necessary objects.
FAILURE: ee9728e9e72428ad394dc7444b0d134e2fb8610f19bbd777c4cabe4a7745b30b (pem).
FILE:
/usr/local/openca/var/openca/tmp/tmp_19553/ca_certificate_sta...@_ca_certificate/@enroll/ee9728e9e72428ad394dc7444b0d134e2fb8610f19bbd777c4cabe4a7745b30b.pem
Exporting @enroll crl_sta...@_crl ...
No objects are present.
Exporting @enroll crr_sta...@_crr ...
No objects are present.
Exporting the Mails ...
Error 690 Configuration Error. Missing Configuration Keyword :
@enroll_mail_sta...@_mail_dir.
**********
Looks to me like there are unresolved variables from configuration?
Here are the transfer related paramaters from my config.xml
<!-- 1. the node acts as CA only -->
<!--
<option>
<name>enroll_ca_certificate_states</name>
<value>VALID</value>
</option>
<option>
<name>enroll_certificate_states</name>
<value>VALID</value>
</option>
<option>
<name>enroll_crl_states</name>
<value>VALID</value>
</option>
<option>
<name>enroll_crr_states</name>
<value>ARCHIVED DELETED APPROVED</value>
</option>
<option>
<name>enroll_csr_states</name>
<value>ARCHIVED DELETED</value>
</option>
<option>
<name>enroll_mail_states</name>
<value>CRINS DEFAULT</value>
</option>
<option>
<name>receive_crr_states</name>
<value>APPROVED</value>
</option>
<option>
<name>receive_csr_states</name>
<value>APPROVED</value>
</option>
<option>
<name>download_ca_certificate_states</name>
<value></value>
</option>
<option>
<name>download_certificate_states</name>
<value></value>
</option>
<option>
<name>download_crl_states</name>
<value></value>
</option>
<option>
<name>download_crr_states</name>
<value></value>
</option>
<option>
<name>download_csr_states</name>
<value></value>
</option>
<option>
<name>download_mail_states</name>
<value></value>
</option>
<option>
<name>upload_crr_states</name>
<value></value>
</option>
<option>
<name>upload_csr_states</name>
<value></value>
</option>
-->
<!-- these are the devices for the default dataexchange -->
<option>
<name>dataexchange_device_up</name>
<value>/dev/sda1</value>
</option>
<option>
<name>dataexchange_device_down</name>
<value>/dev/sda1</value>
</option>
<option>
<name>dataexchange_device_local</name>
<value>/tmp/openca_local</value>
</option>
Thanks a lot for any hints.
Martin
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users
