On Thu, Jun 24, 2010 at 01:01:09PM -0400, Massimiliano Pala wrote:
> On 06/24/2010 07:51 AM, Geert Hendrickx wrote:
> [...]
> >The "Active" menu entry takes me to a CA key passphrase form, and after
> >submitting that, I get a long delay and eventually an incomplete status
> >overview screen (html code is interrupted).  The certificate issuing is
> >enabled though, but no opportunity to modify the displayed options.
> 
> That is really strange.. there's definitely an error - you should check
> the log file.. it is impossible to understand what's going on without
> looking at that.


[click CA Operations > Auto Certificate Issuing > Activate]

initServer: BrowserSupportedLanguage(s) [en-us,en;q=0.7,nl-be;q=0.3]
initServer: BrowserSupportedCharset(s)  [ISO-8859-15,utf-8;q=0.7,*;q=0.7]
select language: en
initServer: setLanguage: setEncoding for log return utf-8
initServer: setLanguage: en_GB :: utf-8
initServer: setLanguage: setEncoding for log return utf-8
initServer: setLanguage: en_GB :: utf-8
libGetPidProcessStatus::Pidfile exists but process is inactive (26661)!
OpenCA::Crypto->getToken: entering function
OpenCA::Crypto->getToken: CA
OpenCA::Crypto->getToken: token added
OpenCA::Crypto->getToken: token is present
OpenCA::Crypto->getToken: token is usable
OpenCA::OpenSSL->_stop_shell: try to stop shell
OpenCA::OpenSSL->_stop_shell: try to stop shell

[enter password, submit]

initServer: BrowserSupportedLanguage(s) [en-us,en;q=0.7,nl-be;q=0.3]
initServer: BrowserSupportedCharset(s)  [ISO-8859-15,utf-8;q=0.7,*;q=0.7]
select language: en
initServer: setLanguage: setEncoding for log return utf-8
initServer: setLanguage: en_GB :: utf-8
initServer: setLanguage: setEncoding for log return utf-8
initServer: setLanguage: en_GB :: utf-8
OpenCA::Crypto->getToken: entering function
OpenCA::Crypto->getToken: CA
OpenCA::Crypto->getToken: token added
OpenCA::Crypto->getToken: token is present
OpenCA::Crypto->getToken: token is usable
OpenCA::OpenSSL->dataConvert: resetting error from -1 to 0.
OpenCA::OpenSSL->dataConvert: passwd is set
OpenCA::OpenSSL->dataConvert: inpwd is set
OpenCA::OpenSSL->dataConvert: outpwd is set
OpenCA::OpenSSL->dataConvert: command=pkcs8  -passin env:inpwd  -passout 
env:outpwd -out /opt/openca-base-1.1.0/var/openca/tmp/26899_cnv.tmp -in 
/opt/openca-base-1.1.0/var/openca/crypto/keys/cakey.pem  -topk8  -outform PEM 
-inform PEM 
OpenCA::OpenSSL->dataConvert: using infile
OpenCA::OpenSSL->_execute_command: entering function
OpenCA::OpenSSL->_start_shell: try to start shell
OpenCA::OpenSSL->_start_shell: | /usr/bin/openssl
1>/opt/openca-base-1.1.0/var/openca/tmp/26899_stdout.log
2>/opt/openca-base-1.1.0/var/openca/tmp/26899_stderr.log
OpenCA::OpenSSL->_start_shell: shell started
OpenCA::OpenSSL->_execute_command: pkcs8  -passin env:inpwd  -passout 
env:outpwd -out /opt/openca-base-1.1.0/var/openca/tmp/26899_cnv.tmp -in 
/opt/openca-base-1.1.0/var/openca/crypto/keys/cakey.pem  -topk8  -outform PEM 
-inform PEM 

OpenCA::OpenSSL->_execute_command: executed
OpenCA::OpenSSL->_execute_command: command executed - stopping shell
OpenCA::OpenSSL->_stop_shell: try to stop shell
OpenCA::OpenSSL->_execute_command: check for error
OpenCA::OpenSSL->_execute_command: detected error log
OpenCA::OpenSSL->_execute_command: stderr: 
OpenCA::OpenSSL->_execute_command: leaving successful (return: 1)
OpenCA::OpenSSL->dataConvert: openssl itself successful
OpenCA::OpenSSL->dataConvert: passphrases deleted
OpenCA::OpenSSL->dataConvert: return result like follows
OpenCA::OpenSSL->dataConvert: -----BEGIN ENCRYPTED PRIVATE KEY-----
...
-----END ENCRYPTED PRIVATE KEY-----

[small delay, reconnecting to MySQL server I guess]

DBD::mysql::db commit failed: MySQL server has gone away at
/opt/openca-base-1.1.0/lib/openca/perl_modules/perl5/OpenCA/DBI.pm line 3421.
DBD::mysql::db commit failed: MySQL server has gone away at 
/opt/openca-base-1.1.0/lib/openca/perl_modules/perl5/OpenCA/DBI.pm line 3421.
OpenCA::OpenSSL->_stop_shell: try to stop shell
OpenCA::OpenSSL->_stop_shell: try to stop shell

[long delay, until the browser times out?  no more logging after that]

The browser displays some incomplete HTML; I see the status table and
after that only "<input ty".

In the regular status screen that line is incomplete also:

<input type="hidden" name="xsrf_protection_token" 
value="31e08958070556c9e5265f6b5e896feac2d6f384"

(missing ">")


 
> >OpenCA: General error trapped 700: The compilation of the command
> >cmdStartAutoCRL failed. Can't locate object method "setHeaderAttribute"
> >via package "OpenCA::CRL" at /opt/openca-base-1.1.0/lib/openca/perl_mo
> >dules/perl5/OpenCA/CRL.pm line 453.<br>
> 
> It is really strange that there is no setHeaderAttribute in the OpenCA::CRL
> module - it should be there. Try to substitute the module with the one I
> attach here and let me know.


Thanks, I'll try that.


> Another question, which distribution are you using (i.e., sources or
> binaries, and if the latter, which one ?)


I built OpenCA from source using ./configure; make; make install (configure
with just some prefixes changed) on CentOS 5.4, 64-bit.


        Geert


-- 
Geert Hendrickx  -=-  g...@telenet.be  -=-  PGP: 0xC4BB9E9F
This e-mail was composed using 100% recycled spam messages!

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to