Hi,

didn't have the time yet for investigating...
Will keep you posted.

Bastian



Mit freundlichen Grüßen,
Kind regards

Bastian Machek
Expert Support


TDT GmbH             Tel.      +49 (0) 8703 929 00
Siemensstr. 18       Fax       +49 (0) 8703 929 201
84051 Essenbach      E-Mail    bmac...@tdt.de
Germany              Internet  www.tdt.de

--------------------------------------------------------------------------
Besuchen Sie uns auf der CeBIT!
von 20.-24. März 2017 – Stand F75/08 Halle 15
--------------------------------------------------------------------------
Die gesetzlichen Pflichtangaben finden Sie unter http://www.tdt.de/imprint
--------------------------------------------------------------------------

-----Ursprüngliche Nachricht-----
Von: Oliver Welter [mailto:m...@oliwel.de]
Gesendet: Samstag, 18. März 2017 08:55
An: openxpki-users@lists.sourceforge.net
Betreff: Re: [OpenXPKI-users] CRL generation fails

Hi Bastian,

did you find the root cause of this problem? It would help us to improve error 
messages and other users with similar problems.

Oliver

Am 20.02.2017 um 11:26 schrieb Oliver Welter:
> Hi Bastian,
>
> can you check the openxpki.log and debug.log for any traces of openssl
> errors - it might not be very readable but can help us to look in the
> right direction.
>
> Paused workflow is ok, we try to rerun the openssl command several
> time (we have multiple customers running hardware modules for their
> tokens which fail under load)
>
> Oliver
>
>
> Am 20.02.2017 um 09:26 schrieb Bastian Machek:
>> Hi Oliver,
>>
>> didn't change anything in CRL config.
>> Tokens are online, however issuance doesn't work neither.
>>
>> Message is: This workflow is paused and will be continued by the
>> watchdog
>>
>>
>> Bastian
>>
>>
>>
>> Mit freundlichen Grüßen,
>> Kind regards
>>
>> Bastian Machek
>> Expert Support
>>
>>
>> TDT GmbH             Tel.      +49 (0) 8703 929 00
>> Siemensstr. 18       Fax       +49 (0) 8703 929 201
>> 84051 Essenbach      E-Mail    bmac...@tdt.de
>> Germany              Internet  www.tdt.de
>>
>> ---------------------------------------------------------------------
>> -----
>>
>> Besuchen Sie uns auf der CeBIT!
>> von 20.-24. März 2017 – Stand F75/08 Halle 15
>> ---------------------------------------------------------------------
>> -----
>>
>> Die gesetzlichen Pflichtangaben finden Sie unter
>> http://www.tdt.de/imprint
>> ---------------------------------------------------------------------
>> -----
>>
>>
>> -----Ursprüngliche Nachricht-----
>> Von: Oliver Welter [mailto:m...@oliwel.de]
>> Gesendet: Freitag, 17. Februar 2017 16:10
>> An: openxpki-users@lists.sourceforge.net
>> Betreff: Re: [OpenXPKI-users] CRL generation fails
>>
>> Hi Bastian,
>>
>> debugging the openssl stuff is unfortunately not possible without
>> extensive "hacking the code".
>>
>> Are the tokens marked "online" on the system status page and does
>> issuance work? Did you change anything in the CRL config as well?
>>
>> Oliver
>>
>> Am 16.02.2017 um 07:56 schrieb Bastian Machek:
>>> Hi all,
>>>
>>>
>>>
>>> I removed the installation created with sampleconfig.sh now, and
>>> rebuilt it from the scratch with my own certificates.
>>>
>>>
>>>
>>> Problem is now the CRL generation fails with: Unknown error (toolkit
>>> command failed)
>>>
>>>
>>>
>>> Is there any way to find out which command fails, and get the error
>>> output?
>>>
>>>
>>>
>>> Thanks in advance.
>>>
>>> Bastian
>>>
>>>
>>> Mit freundlichen Grüßen,
>>> Kind regards,
>>>
>>> *Bastian Machek*
>>> Expert Support
>>>
>>> www.tdt.de <http://www.tdt.de> *TDT GmbH* Siemensstrasse 18
>>> Gewerbegebiet Altheim
>>> 84051 Essenbach - Germany Tel:
>>> FAX:
>>> Email:
>>> www:  +49 8703 929-00
>>>  +49 8703 929-201
>>>  *bmac...@tdt.de*
>>>  www.tdt.de <http://www.tdt.de>
>>>
>>>
>>> www.cebit.de <http://www.cebit.de> *Besuchen Sie uns auf der CeBIT!*
>>> von 20.-24. März 2017 – Stand F75/08 Halle 15
>>>
>>>
>>> Die gesetzlichen Pflichtangaben finden Sie unter
>>> http://www.tdt.de/imprint
>>>
>>>
>>>
>>>
>>> --------------------------------------------------------------------
>>> --
>>> -------- Check out the vibrant tech community on one of the world's
>>> most engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>>>
>>>
>>>
>>> _______________________________________________
>>> OpenXPKI-users mailing list
>>> OpenXPKI-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>>>
>>
>>
>> --
>> Protect your environment -  close windows and adopt a penguin!
>>
>> ---------------------------------------------------------------------
>> ---------
>>
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>> _______________________________________________
>> OpenXPKI-users mailing list
>> OpenXPKI-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>>
>
>
>
>
> ----------------------------------------------------------------------
> -------- Check out the vibrant tech community on one of the world's
> most engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>
>
>
> _______________________________________________
> OpenXPKI-users mailing list
> OpenXPKI-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>


--
Protect your environment -  close windows and adopt a penguin!

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to