Hi Kevin,

Am 22.09.2015 um 15:42 schrieb Kevin Waller:
Hello,
I just did a fresh install of openxpki on wheezy from the repos as
specified in the quickstart guide.

System version is Version (core): 0.34.1

oops - I should upload the 0.36 we did last week to the server =)

I created my own certs in this signed order
[Root] (Self)
--[Signer] (Signed by root)
--[Vault] (Signed by root)
--[SCEP] (Signed by root)

They all loaded/imported without error, and everything looked happy.

When I go into the web interface it shows that all my certs are offline
(I am assuming this is not good).
The check for the SCEP cert is known to be broken but the others should be definitly green.
* Did you place the private keys into /etc/openxpki/ssl/ca-one
* Check the naming (ca-one-signer-01.pem, ca-one-vault-01.pem, ca-one-scep-01.pem)
* Are the keys readable by the openxpki user

When I look at a workflow for one of the CRL issue attempt, it says
"This workflow was interrupted by an unexpected event, please contact
the support team!"
Have a look at /var/openxpki/openxpki.log - I guess it says soemthing like "token unusable".

Oliver

--
Protect your environment -  close windows and adopt a penguin!

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to