Hi, > First I want to say I found another very interesting thing. > (Not changed "allow_anon_enroll=1" yet) > If I change the subject within the CSR to: "CN=<myhost>,DC=Test > Deployment.openxpki.org" my request gets stuck on "pending". > Then I have the possiblity to "Reject Request" in red button & "Reject > Request" in green button. > After I have done the "Reject Request" with green button, I can now "Approve > Request". > Then my SSCEP client correctly receives the certificate. > (Here are some screenshots: https://imgur.com/a/FaJTwju )
Thanks for pointing this out, I have committed a fix to the button labeling to the develop branch. It will be included with the next release. > Maybe you can explain to me WHY changing the subject to the one above is > required? :) I am afraid I have no idea. If just changing the subject changed the behaviour this indicates that there might be a bug in the class that determines if the request is an enrollment on behalf or an anonymous request. I guess we have to replicate the exact test case in our environment to find out the reason. Would you mind creating an Issue on Github and including the sample data you used (e. g. the OpenSSL command line and the exact subject you used)? > Now based on your instructions I changed "allow_anon_enroll = 1" & I changed > the subject like described above. > The workflow stops again in status "pending". > I have now directly the possibility to select "Approve Request" (without > previous "Reject Request"). > Then my SSCEP client correctly receives the certificate. Glad to hear it works now. Cheers Martin _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
