Hi Adnrej, Am 09.10.2015 um 10:52 schrieb Andrej Pintar:
Are there any YT videos or any kind of documentation in more detail.
Well, no - setting up a PKI is nothing you should do with a YT Tutorial.
Also when trying to make certs i get this error in log file: 2015/10/05 23:32:19 openxpki.system.ERROR:19150 [OpenXPKI::Server::API::Object (1422); raop(RA Operator)@d3f9] Exception: I18N_OPENXPKI_SERVER_API_OBJECT_GET_DATA_POOL_ENTRY_ENCRYPTION_KEY_UNAVAILABLE; __PKI_REALM__ => uniline; __KEY__ => Szujbc65YKSSpYS06VVhhdzeykU; __SAFE_ID__ => ca-one-vault-1; __NAMESPACE__ => sys.datapool.keys
..
I did an installation on debian 7. Modified the shell script to create CA and other keys, certs. Install went smooth. Also created separate realm. All certs install in ssl. Copied ca-one into realm name.
This *is* the problem - a new realm also requires its own keys, so you need to create a second set of tokens and import them into your new realm. You should also rename the token alias in the "crypto.yaml" file inside your realm config so the used prefix matches the realms name.
I would recommend you try out OpenXPKI with a single realm and get used to it before doing "advanced" setup.
Oliver -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
