Hi Nick,
I assume you are using mysql or MariaDB older than 10.2, you need to
disable this:
https://github.com/openxpki/openxpki-config/blob/community/config.d/realm.tpl/nice.yaml
The revocation_id feature allows to determine when a certificate was
first added to a CRL - it is a "info only" feature in the default setups
but required when you use "RA/CA" split (which is not part of the
community default configuration).
Oliver
Am 05.12.20 um 20:17 schrieb Nick Dawson:
I know I'm posting a lot of questions and I really appreciate the
support. I'm googling and re-re-reading the docs before I post. I'm
hopeful that I resolve some of these issues, the mailing list archive
might be helpful to others too.
My current challenge is in revoking certificates. When I try to approve
a revocation request, I get:
2020/12/05 11:56:37 ERROR Database error: execution of SQL query failed;
__dbi_error__ => You can't specify target table 'certificate' for update
in FROM clause, __dsn__ =>
dbi:mysql:database=openxpki;host=localhost;port=3306, __query__ =>
UPDATE certificate SET revocation_id = (SELECT
coalesce(max(revocation_id)+1, 1) FROM certificate) , status = ? WHERE (
( identifier = ? AND revocation_id IS NULL ) ), __source__ =>
DBD::mysql::st::execute, __user__ => openxpki
[pid=54004|sid=UjKo|wftype=certificate_revocation_request_v2|wfid=11775]
2020/12/05 11:56:37 ERROR Caught exception from action: Database error:
execution of SQL query failed; __dbi_error__ => You can't specify target
table 'certificate' for update in FROM clause, __dsn__ =>
dbi:mysql:database=openxpki;host=localhost;port=3306, __query__ =>
UPDATE certificate SET revocation_id = (SELECT
coalesce(max(revocation_id)+1, 1) FROM certificate) , status = ? WHERE (
( identifier = ? AND revocation_id IS NULL ) ), __source__ =>
DBD::mysql::st::execute, __user__ => openxpki; reset workflow to old
state 'NICE_DISPATCH_REVOKE'
[pid=54004|sid=UjKo|wftype=certificate_revocation_request_v2|wfid=11775]
2020/12/05 11:56:37 ERROR
I18N_OPENXPKI_SERVER_WORKFLOW_ERROR_ON_EXECUTE; __ACTION__ =>
global_nice_revoke_certificate, __ERROR__ => Database error: execution
of SQL query failed; __dbi_error__ => You can't specify target table
'certificate' for update in FROM clause, __dsn__ =>
dbi:mysql:database=openxpki;host=localhost;port=3306, __query__ =>
UPDATE certificate SET revocation_id = (SELECT
coalesce(max(revocation_id)+1, 1) FROM certificate) , status = ? WHERE (
( identifier = ? AND revocation_id IS NULL ) ), __source__ =>
DBD::mysql::st::execute, __user__ => openxpki, __EXCEPTION__ =>
OpenXPKI::Exception
[pid=54004|sid=UjKo|wftype=certificate_revocation_request_v2|wfid=11775]
2020/12/05 11:56:38 ERROR Error executing workflow activity
'crr_approve_crr' on workflow id 11775 (type
certificate_revocation_request_v2):
I18N_OPENXPKI_SERVER_WORKFLOW_ERROR_ON_EXECUTE; __ACTION__ =>
global_nice_revoke_certificate, __ERROR__ => Database error: execution
of SQL query failed; __dbi_error__ => You can't specify target table
'certificate' for update in FROM clause, __dsn__ =>
dbi:mysql:database=openxpki;host=localhost;port=3306, __query__ =>
UPDATE certificate SET revocation_id = (SELECT
coalesce(max(revocation_id)+1, 1) FROM certificate) , status = ? WHERE (
( identifier = ? AND revocation_id IS NULL ) ), __source__ =>
DBD::mysql::st::execute, __user__ => openxpki, __EXCEPTION__ =>
OpenXPKI::Exception
[pid=54004|sid=UjKo|wftype=certificate_revocation_request_v2|wfid=11775]
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
--
Protect your environment - close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
