Hi,

there are very likely some leftovers from the old realm - have a look at
the datapool table.

Oliver

Am 19.08.21 um 15:35 schrieb Gabriel Carissimo:
> Hello
> I created a new reaml, and I am getting the following error: Active
> Encryption Token not available (vault-1), I had previously deleted a 
> reaml with the same name to re-create it with a new validity for the
> CA. in the openxpki.log I am logging the following:
>
> ERROR OpenSSL error: 139695965799552:error:08064066:object identifier
> routines:OBJ_create:oid exists:../crypto/objects/obj_dat.c:709:
> Error decrypting PKCS#7 structure
> 139695965799552:error:0D0AE0AB:asn1 encoding
> routines:oid_module_init:adding object:../crypto/asn1/asn_moid.c:38:
> 139695965799552:error:0E07606D:configuration file
> routines:module_run:module initialization
> error:../crypto/conf/conf_mod.c:177:module=oid_section,
> value=new_oids, retcode=-1      
> 139695965799552:error:21070073:PKCS7 routines:PKCS7_dataDecode:no
> recipient matches certificate:../crypto/pkcs7/pk7_doit.c:491:
> 139695965799552:error:21072077:PKCS7 routines:PKCS7_decrypt:decrypt
> error:../crypto/pkcs7/pk7_smime.c:500:
>  [pid=1918|sid=///F]
> 2021/08/19 10:28:22 ERROR I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_FAILED;
> __EXIT_STATUS__ => 1024 [pid=1918|sid=///F]
> 2021/08/19 10:28:22 ERROR I18N_OPENXPKI_TOOLKIT_COMMAND_FAILED;
> __COMMAND__ =>
> OpenXPKI::Crypto::Backend::OpenSSL::Command::pkcs7_decrypt, __ERRVAL__
> => I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_FAILED; __EXIT_STATUS__ => 1024
> [pid=1918|sid=///F]
>
> I checked the reaml permissions and apparently they are correct.
> any idea ?, on the same server I have other reamls, which are working
> without problems
>
> Thanks
> Gabriel
>
>
> _______________________________________________
> OpenXPKI-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openxpki-users


-- 
Protect your environment -  close windows and adopt a penguin! 

_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to