Hi Julio,

On Thu, Sep 11, 2008 at 09:35:34AM -0300, Julio Cesar Gazquez wrote:
> > Try running with debug information enabled - openxpkictl start --debug
> > 128. Then look for the error (search for get_error from the bottom of
> > the file) in stderr.log and scroll up a bit to see which openssl command
> > caused the return code 1.
> 
> I18N_OPENXPKI_CRYPTO_OPENSSL_COMMAND_ISSUE_CERT_KEYFILE_DOES_NOT_EXIST
> 
> Ouch!

Well, at least it is a bit more verbose :)

> Yet I redeployed the CA following carefully the steps in the wiki, and just 
> got the same result. I have the keys in the filesystem, and I'm pretty sure I 
> imported correctly as well:
> 
> # ls /etc/openxpki/instances/trustcenter1/ca/*
> /etc/openxpki/instances/trustcenter1/ca/scepdummyserver1:
> key.pem
> 
> /etc/openxpki/instances/trustcenter1/ca/testdummyca1:
> cacert.pem  cakey.pem
> 
> /etc/openxpki/instances/trustcenter1/ca/testdummyca2:
> cacert.pem  cakey.pem

Are those accessible by the user running openxpkid? Are they the
ones referenced in token.xml?

HTH,
  Alex
-- 
Dipl.-Math. Alexander Klink | IT-Security Engineer |    [EMAIL PROTECTED]
 mobile: +49 (0)178 2121703 |          Cynops GmbH | http://www.cynops.de
----------------------------+----------------------+---------------------
      HRB 7833, Amtsgericht | USt-Id: DE 213094986 |     Geschäftsführer:
     Bad Homburg v. d. Höhe |                      |      Martin Bartosch

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to