The workflow is in "On Behalf" mode which is the case if the subjects dont match. In this mode the signer certificate must be registered a trusted party which is not the case.

Am 13.08.19 um 19:59 schrieb timothy dennison:
The Error Code in the UI is "Requester is not in authorized signers list" for that workflow.  Can you explain that to me?

On Tue, Aug 13, 2019 at 1:53 AM Oliver Welter <[email protected] <mailto:[email protected]>> wrote:

    Hi,

    check the error message in the workflow via the UI - the renewal is
    refused, most likely you dont meet the requirements for a renewal
    (subject must be the same as the old certificate).

    Oliver

    Am 08.08.19 um 08:19 schrieb timothy dennison:
     > I'm using sscep to generate SCEP requests to a vanilla openxpki
    server.
     > I'm able to perform the enrollment fine and manually accept and
    approve
     > the certificate.  However, whenever I attempt to renew the
    certificate
     > I'm receiving generic error messages in the /var/log/openxpki log:
     >
     > 2019/08/08 02:15:16 openxpki.application.DEBUG New session of type
     > 'Memory' created [pid=28992|]
     > 2019/08/08 02:15:17 openxpki.application.INFO
    <http://openxpki.application.INFO>
     > <http://openxpki.application.INFO> SCEP incoming request, id
     > 0C2EDE467F2E9B915B22BFE7B4BFBF50
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 Workflow.Factory.DEBUG Fetched data for workflow
     > '7167' ok: [State: FAILURE] [Last update: 2019-08-08T06:07:40]
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 Workflow.INFO Instantiating workflow of with ID
     > '7167' and type 'certificate_enroll' with current state 'FAILURE'
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 Workflow.DEBUG Assigning parameter 'persister' ->
     > 'OpenXPKI'
    [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 Workflow.DEBUG Finding Workflow::State object for
     > state [given: FAILURE] [internal: FAILURE]
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 Workflow.DEBUG Getting current actions for wf
    '7167'
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 Workflow.DEBUG Finding Workflow::State object for
     > state [given: FAILURE] [internal: FAILURE]
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 openxpki.application.INFO
    <http://openxpki.application.INFO>
     > <http://openxpki.application.INFO> SCEP incoming request, found
    workflow
     > 7167, state FAILURE
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     > 2019/08/08 02:15:17 openxpki.application.ERROR SCEP Request failed
     > without error code set - default to badRequest
     > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50]
     >
     >
     > _______________________________________________
     > OpenXPKI-users mailing list
     > [email protected]
    <mailto:[email protected]>
     > https://lists.sourceforge.net/lists/listinfo/openxpki-users
     >


-- Protect your environment -  close windows and adopt a penguin!

    _______________________________________________
    OpenXPKI-users mailing list
    [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/openxpki-users



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users



--
Protect your environment -  close windows and adopt a penguin!


_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to