When you say the "subject don't match", is that just the CN of the subject or does it include the DC parts as well? For some reason, the DC components are "DC=org,DC=OpenXPKI,DC=Test Deployment" automatically on my original certificate.
On Wed, Aug 14, 2019 at 2:11 PM Oliver Welter <[email protected]> wrote: > The workflow is in "On Behalf" mode which is the case if the subjects > dont match. In this mode the signer certificate must be registered a > trusted party which is not the case. > > Am 13.08.19 um 19:59 schrieb timothy dennison: > > The Error Code in the UI is "Requester is not in authorized signers > > list" for that workflow. Can you explain that to me? > > > > On Tue, Aug 13, 2019 at 1:53 AM Oliver Welter <[email protected] > > <mailto:[email protected]>> wrote: > > > > Hi, > > > > check the error message in the workflow via the UI - the renewal is > > refused, most likely you dont meet the requirements for a renewal > > (subject must be the same as the old certificate). > > > > Oliver > > > > Am 08.08.19 um 08:19 schrieb timothy dennison: > > > I'm using sscep to generate SCEP requests to a vanilla openxpki > > server. > > > I'm able to perform the enrollment fine and manually accept and > > approve > > > the certificate. However, whenever I attempt to renew the > > certificate > > > I'm receiving generic error messages in the /var/log/openxpki log: > > > > > > 2019/08/08 02:15:16 openxpki.application.DEBUG New session of type > > > 'Memory' created [pid=28992|] > > > 2019/08/08 02:15:17 openxpki.application.INFO > > <http://openxpki.application.INFO> > > > <http://openxpki.application.INFO> SCEP incoming request, id > > > 0C2EDE467F2E9B915B22BFE7B4BFBF50 > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 Workflow.Factory.DEBUG Fetched data for > workflow > > > '7167' ok: [State: FAILURE] [Last update: 2019-08-08T06:07:40] > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 Workflow.INFO Instantiating workflow of with > ID > > > '7167' and type 'certificate_enroll' with current state 'FAILURE' > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 Workflow.DEBUG Assigning parameter > 'persister' -> > > > 'OpenXPKI' > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 Workflow.DEBUG Finding Workflow::State object > for > > > state [given: FAILURE] [internal: FAILURE] > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 Workflow.DEBUG Getting current actions for wf > > '7167' > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 Workflow.DEBUG Finding Workflow::State object > for > > > state [given: FAILURE] [internal: FAILURE] > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 openxpki.application.INFO > > <http://openxpki.application.INFO> > > > <http://openxpki.application.INFO> SCEP incoming request, found > > workflow > > > 7167, state FAILURE > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > 2019/08/08 02:15:17 openxpki.application.ERROR SCEP Request failed > > > without error code set - default to badRequest > > > [pid=28992|sid=U1yy|sceptid=0C2EDE467F2E9B915B22BFE7B4BFBF50] > > > > > > > > > _______________________________________________ > > > OpenXPKI-users mailing list > > > [email protected] > > <mailto:[email protected]> > > > https://lists.sourceforge.net/lists/listinfo/openxpki-users > > > > > > > > > -- > > Protect your environment - close windows and adopt a penguin! > > > > _______________________________________________ > > OpenXPKI-users mailing list > > [email protected] > > <mailto:[email protected]> > > https://lists.sourceforge.net/lists/listinfo/openxpki-users > > > > > > > > _______________________________________________ > > OpenXPKI-users mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/openxpki-users > > > > > -- > Protect your environment - close windows and adopt a penguin! > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users >
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
