Hi Daniel, When running sscep - do you terminate and restart the client while you are approving or do you leave it polling? There was some rework done on the client in the past and there have been some issues with exactly this parser part.
So can you please try to enroll against the demo http://demo.openxpki.org/scep/test. I have currently no idea why this is crashing and just want to be sure that the problem ist not your sscep binary. Oliver Am 12.03.20 um 18:00 schrieb Daniel Heitepriem: > Hi Oliver, > > I'm using the Debian packages from your server on a recent Debian Buster > (10.3) in a LXC container > > Regards, > Daniel > > Am 12.03.20 um 17:57 schrieb Oliver Welter: >> Hi Daniel, >> >> are you using the Debian packages from our server or what is your >> platform / code base? >> >> Oliver >> >> Am 12.03.20 um 17:33 schrieb Daniel Heitepriem: >>> Oliver expected it to be the eMail address which crashes the SCEP >>> library. So I just recreated the CA without the eMail in the certificates: >>> >>> Root-CA: C = DE, ST = Hessen, L = City, O = My Company, OU = >>> Infrastructure, CN = Company Root CA >>> Issuing-CA: C=DE, O=My Company, OU=Infrastructure, CN=Company >>> Issuing CA (signed by the Root-CA certificate) >>> SCEP-RA: CN=my-pki-host.lan:scep-ra (signed by the Issuing-CA >>> certificate) >>> >>> but the error with >>> >>> Unreadable Issuer and Subject data in encrypted content >>> >>> remains >>> >>> Am 12.03.20 um 15:51 schrieb Daniel Heitepriem: >>>> I just sent you both certificates off-list. They were generated using >>>> the adapted sampleconfig.sh script. Might be that the SCEP library >>>> crashes because the subject of the "Issuing CA" certificate contains >>>> an eMail similar to this? >>>> >>>> ISSUING_CA_SUBJECT='/C=DE/ST=Hessen/L=MyCity/O=My >>>> Company/OU=Infrastructure/CN=company Issuing >>>> CA/[email protected]' >>>> >>>> >>>> Am 12.03.20 um 15:37 schrieb Oliver Welter: >>>>> Am 12.03.20 um 13:48 schrieb Daniel Heitepriem: >>>>>> Unreadable Issuer and Subject data in encrypted content >>>>> Can you please send me the CA / RA certificate - this looks like you are >>>>> using some special chars or something that crashes the SCEP library :( >>>>> >>>>> Oliver >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> OpenXPKI-users mailing list >>>>> [email protected] >>>>> https://lists.sourceforge.net/lists/listinfo/openxpki-users >>>> _______________________________________________ >>>> OpenXPKI-users mailing list >>>> [email protected] >>>> https://lists.sourceforge.net/lists/listinfo/openxpki-users >>> _______________________________________________ >>> OpenXPKI-users mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/openxpki-users >>> >> >> >> _______________________________________________ >> OpenXPKI-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/openxpki-users > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users > -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
