It looks like you want to issue a certificate with a validity of 15 years....(hope you know what you are doing) but your CA certificate is not valid at this point in time. OpenXPKI uses the "shell model" which requires that the CA lifetime is at least equal to the signed certificates lifetime.
So either you reduce the validity or you must create a new issuing ca that has a sufficient long validity period. Oliver Am 05.08.21 um 16:14 schrieb Gabriel Carissimo: > Thank you very much, how always to you Oliver! > > The only error that I detect is the openxpki.log and it is the following: > 2021/08/05 11:02:13 ERROR Could not find token alias by group; > __group__ => ca-signer, __noafter__ => 2101557733, __notbefore__ => > 1628172133, __pki_realm__ => XXXXXX > [pid=22660|sid=PLa1|wftype=certificate_signing_request_v2|wfid=327935] > 2021/08/05 11:02:13 ERROR Caught exception from action: [Generic > exception]; reset workflow to old state > 'APPROVED_GLOBAL_PERSIST_CSR_0' > [pid=22660|sid=PLa1|wftype=certificate_signing_request_v2|wfid=327935] > > what should I do? > > thanks > Gabriel > > El jue, 5 ago 2021 a las 3:23, Oliver Welter (<[email protected] > <mailto:[email protected]>>) escribió: > > Hi, > > I assume this is the CSR "issue certificate" step - the backend > error is usually a problem with the openssl call to create the > certificate, check the errors logs. > > Oliver > > Am 04.08.21 um 21:55 schrieb Gabriel Carissimo: >> Hi friends >> I am receiving this message, I attach an image, what could be >> happening? >> >> >> >> https://drive.google.com/file/d/1Xh-snQqZLeIg8nM6225CkGHppRg1NBNG/view?usp=sharing >> >> <https://drive.google.com/file/d/1Xh-snQqZLeIg8nM6225CkGHppRg1NBNG/view?usp=sharing> >> >> thanks >> >> >> _______________________________________________ >> OpenXPKI-users mailing list >> [email protected] >> <mailto:[email protected]> >> https://lists.sourceforge.net/lists/listinfo/openxpki-users >> <https://lists.sourceforge.net/lists/listinfo/openxpki-users> > > > -- > Protect your environment - close windows and adopt a penguin! > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > <mailto:[email protected]> > https://lists.sourceforge.net/lists/listinfo/openxpki-users > <https://lists.sourceforge.net/lists/listinfo/openxpki-users> > > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin!
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
