Hi Mohamed..
Once, about a month ago, I also run into a similar problem.. The RA
operator just couldn't sign the certificate request. An alert window
always came up with this note : "Sign is needed to proceed!"
So I checked the cgi script in 'cgi-raserver/sheets' directory, and in a
file called app_req.html, I found this function :
<SCRIPT LANGUAGE="javascript1.2">
function signForm( theForm, theWindow) {
var signedText;
signedText = theWindow.crypto.signText(theForm.text.value, "ask");
if( signedText.length < 100 ) {
alert( "Sign is needed to proceed!" );
return false;
} else {
theForm.signature.value = signedText;
theForm.submit();
}
}
</SCRIPT>
I tried to change the value 100 (in line containing
"if(signedText.length < 100 )" ) into a lower number (in my case, it was
changed to be 10). After I did that, I succeeded in signing the requests.
I don't know if that is a correct action or not, but maybe you can also
try it.. :)
Regards,
-Fira-
On Tue, 27 Jun 2000, Mohamed LRHAZI wrote:
> Ok guys,
>
> looks like this list and this open project are both alive indeed.. thank
> God :)
>
> You did help me a step further... but I am not rockiing yet :(
> my favourite, most used commands these days are :-)
>
> [root@pcmlrhazi OpenCA]# history |grep rm|wc -l
> 56
> [root@pcmlrhazi OpenCA]# history |grep rm|tail
> 1182 \rm -rf /usr/local/OpenCA/
> 1183 \rm -rf /usr/local/apache/cgi-bin/*
> 1184 \rm -rf /usr/local/apache/htdocs-*
> 1190 \rm -rf OpenCA-SNAP-20000525/
>
> and of course : tar zxf
> /mnt/soleil/SoftArchive/OpenCA-SNAP-20000525.tar.gz
>
> After creating the .p12 file, with some errors about "not found files",
> probably
> the subject of a currently running thread (RE: Bug report ?)
> I made it into uploading the cert into my netscape browser.. and now, I
> do see
> the used-to-be-very-volatile window, I named the digital signing
> window....
> and that s where I am stuck again... poor me... I really started to
> think
> lately that I became very good with open soft products... well, not yet!
>
> I did restart apache, and the vertual site does point to the right
> server.crt and key
> and does have the SetEnv SSL_CLIENT_M_SERIAL 0x2
> and 0x2 is what I see in the generated cert...
>
> I will carry on on this, but please, can anobody tell me exactly what
> are the files/dir hierarchies I have to creare, and when exactly to
> launch
> the DB creation commands?
>
> Moahmed~
>
>
> Scribe Gob wrote:
> >
> > Le 27/06/2000 � 17:19, Mohamed LRHAZI tapottait de ses petits doigts :
> > > Hello all,
> > > I am still stuck on the same point, although I dropped Solaris, and
> > > reinstalled everything on a
> > > linux box... I thought I ll have more luck, since thats where open ca
> > > been devolleped first huh?
> > Good (in my opinion) !!! A linux box is certainly a fairly good box
> > for developpers :)
> >
> > >
> > > well, I m still stck on "Approving a cert rquest"... how do you guys do
> > > it?
> > > I see the req in the pending list.. click it than Approve it, and
> > > nothing seems to happen... a window shows up then disappears...
> > > and nothing in the approved list!!!!
> > You mean you cannot "approve" a request .
> > I think it's because you don't have a Certificate of RA Operator
> > (in fact, you're not a RA Ops , or RAs as the term seem to be)
> > You need to :
> > - Generate a RA-Operator Certificate
> > - export it in a Netscape importable format (.p12)
> > - use it to sign the request (to say "I approve it")
> > - an let's rock :)
> >
> > >
> > > Please drop me a hint....
> > About "How to generate a RA Operator Certificate ?", you should
> > read some fresh news in the openca-users ml in the currents hours :)
> >
> > > Mohamed LRHAZI wrote:
> > > >
> > > > Hello all,
> > > > first thanx so much for this open project... so so useful...
> > > > i am trying the latest packages (not the build snap)...
> > > > i intalled the three servers on the same machine (Ultra 5/Solaris7)
> > > > and FYI I had to install the latest recommanded cluster patch for Sun
> > > > before
> > > > I could get the perl modules to "make test" successfully...
> > ?? What about those "cluster patch" ? How do they impact on Perl ?
> >
> > > >
> > > > where I am stuck right now, is "Confirm Request Approval" page...
> > > > when I click the approve req button, a window shows up then disappears
> > > > very very quickly, and then I get the popup: "Sign is needed to proceed"
> > > > ...
> > > > this is on Netscape 4.7, the javascript: console says nothing!
> > > > from an MSIE I get a javascript error :
> > Yes, M$IE is not supported at this time. Will perhaps be the case in the future...
> >
> > --
> > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> > [EMAIL PROTECTED] -- http://fumble.org
> > "un gob sinon rien !"
> > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
> --------------------------------------------------------------
> Per problemi: [EMAIL PROTECTED] oppure (anche meglio)
> [EMAIL PROTECTED] (messaggio con la sola parola HELP)
> --------------------------------------------------------------
>
--------------------------------------------------------------
Per problemi: [EMAIL PROTECTED] oppure (anche meglio)
[EMAIL PROTECTED] (messaggio con la sola parola HELP)
--------------------------------------------------------------
