Hi,
Getting the same error (on ts_rsp_sign.c:206) with the file I send means
that you are not using the right files : I have explicitely tested the
OpenSSL function referenced in ts_rsp_sign.c and it is working with no
error. You have to check your configuration in order to point to the
Hello!
Thank you very much for your help.
I managed to install it, load the server and connect to the database, the
problem was the version of apache. Compiled httpd-2.0.59 version.
Now I want to try the service for time stamping. I generate a query with the
following command:
. /openssl
Hello!
Thanks for your help and monitoring.
Yes, I get the same error, I also throws the same when tested with the
files you
sent me.
I think there must be something I missed or did wrong in the installation.
Which version did you use for this package:
openssl
mod_tsa
Apache
mod_ssl
mysql
Hello Yessica,
please post new certificate and exact error you're getting.
--
Kind Regards / S pozdravom
Jaroslav Imrich
http://www.jariq.sk
On Mon, Feb 21, 2011 at 4:41 PM, Yessica De Ascencao
yessima...@gmail.comwrote:
hello!!!
Thanks for the response!
Yes I needed the extension to
Hi Yessica:
That error is fairly straightforward - it's can't load the cert (meaning, it
can't even load the file).
Have you made sure that the permissions are correct? Are you absolutely sure
that you have the right cert in the right location?
Have fun.
Patrick.
On 2011-02-22, at 8:37 AM,
Hi,
I don't agree : from the error description
(lib(47):func(131):reason(117):ts_rsp_sign.c:206) it is clear that
OpenSSL loaded the certificate but the X509_check_purpose(signer,
X509_PURPOSE_TIMESTAMP_SIGN, 0) call in ts_rsp_sign failed.
Actaully, reading the certificate dump shows that
Hi Patrick!
The certificate has all permissions, and the tutorial does not specify a
location for its storage.
Thanks!
2011/2/22 Patrick Patterson ppatter...@carillonis.com
Hi Yessica:
That error is fairly straightforward - it's can't load the cert (meaning,
it can't even load the file).
Hi Mounir IDRASSI!
I generated the certificate with ONLY Digital Signature, Non Repudiation but
I still have the same problem.
Thanks!
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:e6:a3:f6:22:c7:a4:0c
Signature Algorithm: sha1WithRSAEncryption
Hello Yessica,
you are almost there :)
Try only Non Repudiation as key usage:
X509v3 Key Usage:
Non Repudiation
X509v3 Extended Key Usage: critical
Time Stamping
--
Kind Regards / S pozdravom
Jaroslav Imrich
http://www.jariq.sk
On
Hi,
Are you sure you have the same error description
(lib(47):func(131):reason(117):ts_rsp_sign.c:206:)? I have tested here
with a certificate containing Digital Signature, Non Repudiation key
usage and OpenSSL doesn't complain.
I'm attaching the timestamp certificate (with its key and its CA
hello!!!
Thanks for the response!
Yes I needed the extension to Time Stamping, however when I load the sample
certificate in the OpenTSA page, continues to show me the same error. I
created a certificate with the correct extension and likewise gives me error
.
I really do not know what may be
Hello!
I have days trying to install the timestamp service with openTSA, but I have
troubles with Step 14: Generate a private key and a certificate Including
the critical TimeStamping X.509v3 extended key usage extension for the TSA
and set-up options in the configuration mod_tsa httpd.conf, see
Hello Yessica,
error may be caused by incorrect extensions in TSA certificate. Could you
please post output of following command:
openssl x509 -in /root/tssCRT.pem -text
--
Kind Regards / S pozdravom
Jaroslav Imrich
http://www.jariq.sk
Hi
TSA certificate:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8d:0b:98:ba:f3:e4:5d:4c
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=ve, ST=distrito capital, L=caracas, O=suscerte, OU=ac,
CN=acraiz/emailAddress=a...@dom.com
I tried with the certificate is opentsa page tsa_ns.crt, still gives me
the same error. This is the certificate:
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=IE, ST=Co. Dublin, L=Dublin,
Hello Yessica,
this line in your logs tells you where the error occured:
[Thu Feb 17 19:23:09 2011] [error]
mod_tsa:1510:error:2F083075:lib(47):func(131):reason(117):ts_rsp_sign.c:206:
When you look into source code of openssl ts module -
16 matches
Mail list logo
