Hi I`ll put my problems in your new support forms ;-)
Problem 1
------------------------------------------------
OpenCA Version : 0.92RC6
Perl Version : gaia:~# perl -v
This is perl, v5.8.4 built for i386-linux-thread-multi
OpenSSL Version : gaia:~# openssl version
OpenSSL 0.9.7d 17 Mar 2004
Operating System: gaia:~# uname -a
Linux gaia 2.4.26-1-386 #1 Tue Aug 24 13:31:19 JST 2004 i586 GNU/Linux
------------------------------------------------
Problem Description: > when I do "export all" from ca-node to ra-node, the
cacert files are zero byte files. I only can export the real ca certificate
via CA webgui and place it into the appropriate folder. but after a new
export all from CA-NODE to RA-NODE , these ca certificates are overwritten
with zero byte files again.
Problem 2 :
Problem 1
------------------------------------------------
OpenCA Version : 0.92RC6
Perl Version : gaia:~# perl -v
This is perl, v5.8.4 built for i386-linux-thread-multi
OpenSSL Version : gaia:~# openssl version
OpenSSL 0.9.7d 17 Mar 2004
Operating System: gaia:~# uname -a
Linux gaia 2.4.26-1-386 #1 Tue Aug 24 13:31:19 JST 2004 i586 GNU/Linux
------------------------------------------------
Problem Description: RA export to a higher level instance only tars empty
files so I think ether something goes wrong with my CRS approvals (but there
is no error and everything seems fine from web gui perspective) or the files
are placed in some false folders and therefore are not tar`ed
> Hi ,
>
> I found the problem, the "cacert" files (der|pem|txt) imported by the ra,
> were all empty, so I downloaded the ca certificates manually from ca
> interface and placed them in the corresponding folders. Now I can approve
> the request.
>
> But now I discover two new problems ;-)
>
> - when I do export all from ca-node to ra-node, the cacert files are
> overwritten and are zero again. :-( I have to repeat the above stated
> stuff
> to approve new CSRs again
>
> - when I do a export from RA-node to CA-node (uploading to higher level) I
> noticed that only empty folder structure is tar`ed . No request is in the
> tar. The webinterface isn`t reporting any error
>
> here is a list of the tar contents
>
> gaia:/usr/local/openca/openca/var/tmp# tar -tvf ca-up
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CA_CERTIFICATE/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CA_CERTIFICATE/VALID/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16
> ./CA_CERTIFICATE/EXPIRED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./MAIL/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./MAIL/CRINS/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./MAIL/DEFAULT/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./LOG/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./LOG/ALL/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./LOG/DOWNLOAD/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./LOG/ENROLL/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./LOG/RECEIVE/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./LOG/UPLOAD/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/NEW/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/PENDING/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/SIGNED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/APPROVED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/ARCHIVED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRR/DELETED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRL/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CRL/VALID/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/NEW/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/RENEW/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/PENDING/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/SIGNED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/APPROVED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/ARCHIVED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./REQUEST/DELETED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CERTIFICATE/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CERTIFICATE/VALID/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CERTIFICATE/EXPIRED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16 ./CERTIFICATE/REVOKED/
> drwx--S--- www-data/www-data 0 2004-10-16 18:08:16
> ./CERTIFICATE/SUSPENDED/
> -rw-r--r-- www-data/www-data 1 2004-10-16 18:08:16 ./module.id
>
> gaia:/usr/local/openca/openca/var/tmp#
>
> exporting from CA-node to RA-node works fine.
> For info I used the same dataexchange directory/files as Kevin Mitcham in
> his Cookbook
>
http://sourceforge.net/mailarchive/forum.php?thread_id=4997394&forum_id=2291
>
> Regards
> Michael
>
>
>
>
> > Hi all,
> > sorry for bothering you all again.
> > I still follow Kevin Mitchams OpenCA cookbook and I am now ready to
> > request
> > my first user certificate .
> >
> > But at "RA" when I want to approve the request , (after searching and
> > clicking on the serial number of the request I want to approve) I
> receive
> > following error
> >
> > Error 700
> > The compilation of the command cmdViewCSR failed. Can't use an undefined
> > value as a HASH reference at
> > /usr/local/openra/openca/lib/servers/ra-node/functions/crypto-utils.lib
> > line
> > 1093.
> >
> > Can somebody help, did I miss something at configuring the CA ?
> > Regards
> > Michael
> >
> > --
> > GMX ProMail mit bestem Virenschutz http://www.gmx.net/de/go/mail
> > +++ Empfehlung der Redaktion +++ Internet Professionell 10/04 +++
> >
>
> --
> GMX ProMail mit bestem Virenschutz http://www.gmx.net/de/go/mail
> +++ Empfehlung der Redaktion +++ Internet Professionell 10/04 +++
>
--
GMX ProMail mit bestem Virenschutz http://www.gmx.net/de/go/mail
+++ Empfehlung der Redaktion +++ Internet Professionell 10/04 +++
|