Richard Levitte said: >It's correct, recertification doesn't work very well. A change would >however mean making a substantial change to the database (index.txt), >which makes it too complicated to get into the 0.9.7 branch.
>I'm planning to work on changing this behavior for 0.9.8. Therefore,
>I'll make sure this ticket has 0.9.8 as milestone.
Is there a solution in the meantime for users having the problem, that
they can't renew their certificate? See attachement.
Christoph
--
============================================================================
Christoph Martin, EDV der Verwaltung, Uni-Mainz, Germany
Internet-Mail: [EMAIL PROTECTED]
Telefon: +49-6131-3926337
Fax: +49-6131-3922856
--- Begin Message ---severity 176062 serious thanks This bug still seems to be present and it is preventing me from renewing the cert for Alioth: [tornado;~/spi/CA]-113> openssl ca -out newcert.pem -infiles alioth.debian.org.csr Using configuration from /usr/lib/ssl/openssl.cnf Enter pass phrase for ./CA/private/cakey.pem: Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' stateOrProvinceName :PRINTABLE:'Indiana' localityName :PRINTABLE:'Indianapolis' organizationName :PRINTABLE:'Software in the Public Interest' organizationalUnitName:PRINTABLE:'Debian' commonName :PRINTABLE:'alioth.debian.org' emailAddress :IA5STRING:'[EMAIL PROTECTED]' Certificate is to be certified until Apr 9 11:03:40 2005 GMT (365 days) Sign the certificate? [y/n]:y failed to update database TXT_DB error number 2 All permissions are correct. An strace reveals that openssl is not even trying to do anything on disk: write(2, "Sign the certificate? [y/n]:", 28) = 28 getpid() = 8217 getpid() = 8217 fstat64(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 1), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001a000 read(0, "y\n", 1024) = 2 getpid() = 8217 getpid() = 8217 open("/dev/urandom", O_RDONLY|O_NONBLOCK|O_NOCTTY) = 6 select(7, [6], NULL, NULL, {0, 10000}) = 1 (in [6], left {0, 10000}) read(6, "[..]", 32) = 32 close(6) = 0 getpid() = 8217 getpid() = 8217 getuid32() = 1000 getpid() = 8217 time(NULL) = 1081507779 getpid() = 8217 time([1081507779]) = 1081507779 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 write(2, "failed to update database\n", 26) = 26 getpid() = 8217 getpid() = 8217 getpid() = 8217 getpid() = 8217 Wichert. -- Wichert Akkerman <[EMAIL PROTECTED]> It is simple to make things. http://www.wiggy.net/ It is hard to make things simple.
--- End Message ---
signature.asc
Description: OpenPGP digital signature
