El Jueves 11 Septiembre 2008 10:06:45 Alexander Klink escribió: > > Yet I redeployed the CA following carefully the steps in the wiki, and > > just got the same result. I have the keys in the filesystem, and I'm > > pretty sure I imported correctly as well: > > > > # ls /etc/openxpki/instances/trustcenter1/ca/* > > /etc/openxpki/instances/trustcenter1/ca/scepdummyserver1: > > key.pem > > > > /etc/openxpki/instances/trustcenter1/ca/testdummyca1: > > cacert.pem cakey.pem > > > > /etc/openxpki/instances/trustcenter1/ca/testdummyca2: > > cacert.pem cakey.pem > > Are those accessible by the user running openxpkid? Are they the > ones referenced in token.xml?
Well, they didn't :-( Permissions under /etc/openxpki were root:root and below certain level they didn't include "others". I just chowned the whole branch to the openxpki user, and it "almost" worked. Now, it gives I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_CHILD_ERROR. I managed to pick the command, and I found it didn't provide either a different openssl.cnf or -key and -cert parameters, so openssl ends looking for a wrong CA key and certificate. So, I'm still completely lost :-( > HTH, > Alex Cheers. -- Julio César Gázquez Area Seguridad Informática -- Int. 736 Municipalidad de Rosario ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
