Hey, I had the same error message some weeks ago and got great support within this mailing list - maybe reading the related mails helps you further:
https://sourceforge.net/p/openxpki/mailman/search/?q=scep+enroll+-+requester+is+not+in+authorized+signer+list Some additional hints I learned: 1. make sure your certificate subject is as easy as possible ( I ended up using only the CN and let openxpki adding the rest) 2. If you want to have "hands off" enrollment make sure your scep server is configured like described in this message: https://sourceforge.net/p/openxpki/mailman/message/34705147/ 3. Do you get any failures within the workflow Search in openxpki or is the request just in "pending" state? Kind Regards Martin On Fri, Oct 26, 2018, 20:19 Darcy Watkins <[email protected]> wrote: > Hi, > > I followed the instructions at > https://openxpki.readthedocs.io/en/latest/quickstart.html to setup a test > server configuration and can log in, etc. I built an sscep client to test > the SCEP service. Everything appears to work OK up to the last stage. > > For the last stage, > > sscep enroll -u http://carmd-er-n00000.sierrawireless.local/scep/scep \ > -k tmp/scep-test.key -r tmp/scep-test.csr \ > -c tmp/cacert-0 \ > -l tmp/scep-test.crt \ > -t 10 -n 1 > > I get the following error: > > sscep: sending certificate > request > sscep: valid response from > server > sscep: reply transaction id: > 1C80739573B63A52747F2A777BCF6112 > sscep: pkistatus: > FAILURE > sscep: reason: Transaction not permitted or > supported > > > I am brand new to openxpki (ultimate newbie ;-), so likely there is > something simple I missed (or something I misunderstood in the docs). > Anyone seen this or know how to get past it to work? > > Server: x86 (64bit) Debian 8 (jessie) > Client: armv7 (32bit) Yocto/OpenEmbedded (daisy+) > > > -- > > > Regards, > > Darcy > > Darcy Watkins :: Senior Staff Engineer, Firmware > SIERRA WIRELESS > Direct +1 604 233 7989 :: Fax +1 604 231 1109 :: Main + > 1 604 231 1100 > 13811 Wireless Way :: Richmond, BC Canada V6V 3A4 [P1] > [email protected] :: www.sierrawireless.com > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users >
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
