[Openca-Users] Sign CRR Error in RA

[Mike W. <mik...@ut...>]

Hi all,

I'm trying to approve CRR requests by signing but the operation fails with:



Error 6206

General Error Cannot build PKCS#7-object from extracted signature!
OpenCA::PKCS7 returns errorcode 7911031 (OpenCA::PKCS7->new: Cannot
initialize signature (7912021). OpenCA::PKCS7->initSignature: Cannot parse
signature (7921021). OpenCA::PKCS7->getParsed: The crypto-backend cannot
verify the signature (7742075). OpenCA::OpenSSL->verify: openca-sv failed.
[Error]: Digest mismatch. Signature is wrong.

CSR approvals by signing works fine.

This issue has been reported before. The signature generated by the browser
(IE or Firefox) is not reproduceable in the OpenCA RA. In troubleshooting
this, I've looked at EOL characters in the var/tmp/xxxx.req file but don't
know what the browser is generating. Anybody get anywhere with this?

Thanks,

Mike