hi,
I have been trying to run a complete demo of Openxpki but since i am facing a
problem, i am unable to continue my testing.
The
problem is, that when i create a CSR from the user:User account, the
request is generated successfully, with the success/summary screen at
the end of the process.
But when i logout and login again as a
caop:CA Operator account, and goes to APPROVE and select PENDING CSR's
and click on the 1 available request, then click on the Approve CSR
button then it asks me to choose from two options, i.e Approve CSR with
digital signature/Approve CS without digital signature.
Then by pressing the Approve CSR with digital signature button, a message box
came up saying:
"Unknown error response from browser: error:noMatchingCert" with an OK
button. Clicking on the OK button leads to the details of the Workflow
Instance.
Clicking the Approve CSR button on the right will lead again to the
"Certificate Signing Request: Approval" screen with those same two options.
Summary: I am unable to sign the CSR and the site jumps between the Approve CSR
screens.
The directories at "/usr/etc/openxpki" and "/usr/var/openxpki" have
openxpki:openxpki permissions as well as 777 permissions.
I have tried the above procedure on svn check out build 1489 as well as the
nightly builds available that are also 1489 build.
Also tried on tar-gz's available at sourceforge having build 13xx (1389 of
Openxpki-0.9.x).
I have generated a Key with RSA::2048::aes256 configuration
and used this xxx.cnf for Openssl certificate generation procedure, as
mentioned on wiki.openxpki.org:
----------------
[ ext ]
keyUsage = critical, cRLSign, keyCertSign
basicConstraints = critical,CA:true
subjectKeyIdentifier = hash
[ req ]
distinguished_name = ca_dn
[ ca_dn ]
countryName = "Country code"
organizationName = "Organization"
organizationalUnitName = "Organizational Unit"
commonName = "Common name"
---------------
My distro configuration:
Debian Lenny 5.01
Apache 2.2.9
Mod_Perl
2
Perl 5.10.0
Also tried with Deban 5.01, Apache 1.3, Mod_Perl 1.31 and Perl 5.10.0 but the
result is the same.
Btw i have also tried the same on Ubuntu 9.04 with Apache 2.x and Perl_Mod 2.x
and Perl 5.10.0 with the same results.
Also
checked both firefox and Internet Explorer for the process, but
Internet explorer on vista gives out 2 to 3 message boxes also on the
CSR Approval stage.
Please Help. I am stuck on the CSR Approval Stage.
Regards,
Jhon Daniel
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
