Hi Bastian,did you find the root cause of this problem? It would help us to improve error messages and other users with similar problems.
Oliver Am 20.02.2017 um 11:26 schrieb Oliver Welter:
Hi Bastian, can you check the openxpki.log and debug.log for any traces of openssl errors - it might not be very readable but can help us to look in the right direction. Paused workflow is ok, we try to rerun the openssl command several time (we have multiple customers running hardware modules for their tokens which fail under load) Oliver Am 20.02.2017 um 09:26 schrieb Bastian Machek:Hi Oliver, didn't change anything in CRL config. Tokens are online, however issuance doesn't work neither. Message is: This workflow is paused and will be continued by the watchdog Bastian Mit freundlichen Grüßen, Kind regards Bastian Machek Expert Support TDT GmbH Tel. +49 (0) 8703 929 00 Siemensstr. 18 Fax +49 (0) 8703 929 201 84051 Essenbach E-Mail bmac...@tdt.de Germany Internet www.tdt.de -------------------------------------------------------------------------- Besuchen Sie uns auf der CeBIT! von 20.-24. März 2017 – Stand F75/08 Halle 15 -------------------------------------------------------------------------- Die gesetzlichen Pflichtangaben finden Sie unter http://www.tdt.de/imprint -------------------------------------------------------------------------- -----Ursprüngliche Nachricht----- Von: Oliver Welter [mailto:m...@oliwel.de] Gesendet: Freitag, 17. Februar 2017 16:10 An: openxpki-users@lists.sourceforge.net Betreff: Re: [OpenXPKI-users] CRL generation fails Hi Bastian, debugging the openssl stuff is unfortunately not possible without extensive "hacking the code". Are the tokens marked "online" on the system status page and does issuance work? Did you change anything in the CRL config as well? Oliver Am 16.02.2017 um 07:56 schrieb Bastian Machek:Hi all, I removed the installation created with sampleconfig.sh now, and rebuilt it from the scratch with my own certificates. Problem is now the CRL generation fails with: Unknown error (toolkit command failed) Is there any way to find out which command fails, and get the error output? Thanks in advance. Bastian Mit freundlichen Grüßen, Kind regards, *Bastian Machek* Expert Support www.tdt.de <http://www.tdt.de> *TDT GmbH* Siemensstrasse 18 Gewerbegebiet Altheim 84051 Essenbach - Germany Tel: FAX: Email: www: +49 8703 929-00 +49 8703 929-201 *bmac...@tdt.de* www.tdt.de <http://www.tdt.de> www.cebit.de <http://www.cebit.de> *Besuchen Sie uns auf der CeBIT!* von 20.-24. März 2017 – Stand F75/08 Halle 15 Die gesetzlichen Pflichtangaben finden Sie unter http://www.tdt.de/imprint ---------------------------------------------------------------------- -------- Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users-- Protect your environment - close windows and adopt a penguin! ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
-- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
