From: David W. B. <bl...@gd...> - 2003-11-28 17:18:04
|
Hi Mike, I was able to import db with roles included this time, however, when I go to perform ca operations (such as issue or revoke certificate) it errors out with 7731071. The httpd log shows: Using configuration from /usr/local/openca.0.9.1/openca/etc/openssl/openssl.cnf entry 2: invalid expiry date unable to write 'random state' Using configuration from /usr/local/openca.0.9.1/openca/etc/openssl/openssl.cnf entry 2: invalid expiry date unable to write 'random state' Using configuration from /usr/local/openca.0.9.1/openca/etc/openssl/openssl/CA_Operator.conf entry 2: invalid expiry date unable to write 'random state' This didn't happen before when the roles were missing. Can you help? Dave Blaine > From: "David W. Blaine" <bl...@gd...> > Subject: Re: [Openca-Users] Database recovery after accidental init > To: ope...@li... > MIME-Version: 1.0 > Content-MD5: jw9gMmPjzInel+LZTDj7rw== > X-Spam-Score: 0.0 (/) > X-Spam-Report: Spam Filtering performed by sourceforge.net. See http://spamassassin.org/tag/ for more details. Report problems to https://sf.net/tracker/?func=add&group_id=1&atid=200001 0.0 CLICK_BELOW Asks you to click below > X-BeenThere: ope...@li... > X-Mailman-Version: 2.0.9-sf.net > X-Reply-To: "David W. Blaine" <bl...@gd...> > List-Help: <mailto:ope...@li...?subject=help> > List-Post: <mailto:ope...@li...> > List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, <mailto:ope...@li...?subject=subscribe> > List-Id: Ideas, tips and discussions about OpenCA installation and management. <openca-users.lists.sourceforge.net> > List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, <mailto:ope...@li...?subject=unsubscribe> > List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum=openca-users> > X-Original-Date: Tue, 25 Nov 2003 10:51:35 -0500 (EST) > Date: Tue, 25 Nov 2003 10:51:35 -0500 (EST) > X-Perlmx-Spam: Gauge=XIIIIII, Probability=16%, Report="CLICK_BELOW, MAILTO_WITH_SUBJ, QUOTED_EMAIL_TEXT, SPAM_PHRASE_08_13, __CLICK_BELOW, __CT, __CT_TEXT_PLAIN, __HAS_MSGID, __HAS_X_MAILER, __KNOWN_MAILING_LIST, __MIME_VERSION, __SANE_MSGID, __X_BEENTHERE" > > Hi Mike, > > I was able to use a reply of yours from the mailing list (subject: current state > query) to recreate a valid backup using the structure you mentioned in your > reply. This allowed me to use the Recover DB feature to get all the certificates > into the DB. One question, however, none of the certificates have a Role > defined. How can this be fixed? > > Dave Blaine > > > From: Michael Bell <mic...@cm...> > > User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030609 > > X-Accept-Language: en-us, en > > MIME-Version: 1.0 > > To: ope...@li... > > Subject: Re: [Openca-Users] Database recovery after accidental init > > Content-Transfer-Encoding: 7bit > > X-Virus-Scanned: by amavisd-new at hu-berlin.de > > X-Spam-Score: 0.0 (/) > > X-Spam-Report: Spam Filtering performed by sourceforge.net. See > http://spamassassin.org/tag/ for more details. Report problems to > https://sf.net/tracker/?func=add&group_id=1&atid=200001 > > X-BeenThere: ope...@li... > > X-Mailman-Version: 2.0.9-sf.net > > List-Help: <mailto:ope...@li...?subject=help> > > List-Post: <mailto:ope...@li...> > > List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, > <mailto:ope...@li...?subject=subscribe> > > List-Id: Ideas, tips and discussions about OpenCA installation and management. > <openca-users.lists.sourceforge.net> > > List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, > <mailto:ope...@li...?subject=unsubscribe> > > List-Archive: > <http://sourceforge.net/mailarchive/forum.php?forum=openca-users> > > X-Original-Date: Tue, 25 Nov 2003 14:29:59 +0100 > > Date: Tue, 25 Nov 2003 14:29:59 +0100 > > > > David W. Blaine wrote: > > > > > I don't have a current backup of the database so how do I get the previous > > > certificates into the database? > > > > If you have no database and no backup how do you store the certificates? > > The easiest way is to look into a backup (CERTIFIATES/VALID etc.) and > > create such a backup by hand or script it is not difficult. > > > > Michael > > -- > > ------------------------------------------------------------------- > > Michael Bell Email: mic...@cm... > > ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 > > (Computing Centre) Fax: +49 (0)30-2093 2704 > > Humboldt-University of Berlin > > Unter den Linden 6 > > 10099 Berlin Email (private): mic...@we... > > Germany http://www.openca.org > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: SF.net Giveback Program. > > Does SourceForge.net help you be more productive? Does it > > help you create better code? SHARE THE LOVE, and help us help > > YOU! Click Here: http://sourceforge.net/donate/ > > _______________________________________________ > > Openca-Users mailing list > > Ope...@li... > > https://lists.sourceforge.net/lists/listinfo/openca-users > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Openca-Users mailing list > Ope...@li... > https://lists.sourceforge.net/lists/listinfo/openca-users |