[Cmpforopenssl-devel] Interop cmpclient with EJBCA

[dominic p. <dom...@gm...>]

Hi,
I am using cmpforopenssl version and EJBCA 4.0.12
Has anyone tried to interop cmpforopenssl client with EJBCA.

I am trying to send an 'ir' request to EJBCA from the cmpclient using the
following command,

./cmpclient --server localhost --port 8080 --path ejbca/publicweb/cmp
--srvcert myAdminCA.cacert.pem --ir --user test1 --password test1
--newclcert test1.pem --newkey test1.key --subject
"C=IN,ST=KAR,L=TEST,O=TEST,OU=EN,CN=EETest1"

I am seeing the following error on the EJBCA after sending the 'ir' request
from the client,

15:40:36,975 ERROR [CrmfMessageHandler] Could not extract password from
CRMF request using the RegTokenPwd authentication module
15:40:36,997 INFO  [CmpServlet] Sent a CMP response to: 127.0.0.1, process
time 217.

On the cmpclient i am seeing the following error,

INFO: Sending Initialization Request
ERROR: received no initial Client Certificate. FILE cmpclient.c, LINE 401
3078551176:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong
tag:tasn_dec.c:1319:
3078551176:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested
asn1 error:tasn_dec.c:381:Type=X509
3078551176:error:32090087:CMP routines:CMP_doInitialRequestSeq:pkibody
error:cmp_ses.c:384:bodytype=23, error="PKIStatus: rejection,
PKIFailureInfo: wrongAuthority"

And ideas ?

Thanks in advance.

Regards
Dominic