ejbca-develop — Development discussions

[Ejbca-develop] Take a survey by UCLA Anderson school of Management

[Tomas G. <to...@pr...>]

Hi,

UCLA Anderson School of Management and PrimeKey is conducting a survey 
regarding the use of EJBCA and PKI. It would be very beneficial to the 
project if you could spare a few minutes to take this short survey.

You can find it over at the EJBCA web site.

http://ejbca.org/

Regards,
Tomas

Re: [Ejbca-develop] web site erroe !!!!???

[Manuel D. <ma...@de...>]

As the page says, sourceforge ist currently down for maintenance. They
had a major fault in the storage unit, see [1] for more information.

~manuel

[1] https://sourceforge.net/blog/sourceforge-infrastructure-and-service-restoration/

On Wed, Jul 22, 2015 at 1:10 PM, mohammed tir <tir...@gm...> wrote:
> hi
> i need to download ejbca 6.3.1 from  site "www.ejbca.org" but i can't ???
>
>
> ------------------------------------------------------------------------------
> Don't Limit Your Business. Reach for the Cloud.
> GigeNET's Cloud Solutions provide you with the tools and support that
> you need to offload your IT needs and focus on growing your business.
> Configured For All Businesses. Start Your Cloud Today.
> https://www.gigenetcloud.com/
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] web site erroe !!!!???

[mohammed t. <tir...@gm...>]

hi
i need to download ejbca 6.3.1 from  site "www.*ejbca*.org" but i can't ???

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[mohammed t. <tir...@gm...>]

Hi

please . I need a tutoriel about " Installing EJBCA  on Windows xp " (Step
by step)

thanks

Re: [Ejbca-develop] Error no client certificate recieved used for authentication

[mohammed t. <tir...@gm...>]

Hi

please . I need a tutoriel about " Installing EJBCA  on Windows xp pack 3"
(Step by step)

thanks

Re: [Ejbca-develop] Problem with the installation of version 6.3.1.1

[Andreas K. <ku...@tr...>]

Hi Johan,

I am running jboss-as-7.1.1.Final.
My https connector config holds no surprises:

        <subsystem xmlns="urn:jboss:domain:web:1.1"
default-virtual-server="default-host" native="false">
            <connector name="http" protocol="HTTP/1.1" scheme="http"
socket-binding="http" redirect-port="8443"/>
            <connector name="httpspriv" protocol="HTTP/1.1"
scheme="https" socket-binding="httpspriv" secure="true">
                <ssl key-alias="ejbtestca.trustable.eu"
password="s3cr3t"
certificate-key-file="/opt/jboss/standalone/configuration/keystore/keystore.jks"
protocol="TLSv1,TLSv1.1,TLSv1.2" verify-client="true"
ca-certificate-file="/opt/jboss/standalone/configuration/keystore/truststore.jks"
ca-certificate-password="s3cr3t"/>
            </connector>
            <connector name="httpspub" protocol="HTTP/1.1"
scheme="https" socket-binding="httpspub" secure="true">
                <ssl key-alias="ejbtestca.trustable.eu"
password="s3cr3t"
certificate-key-file="/opt/jboss/standalone/configuration/keystore/keystore.jks"
protocol="TLSv1,TLSv1.1,TLSv1.2"/>
            </connector>
            <virtual-server name="default-host" enable-welcome-root="true">
                <alias name="localhost"/>
                <alias name="example.com"/>
            </virtual-server>
        </subsystem>

I cannot guess where the reference for Bouncy Castle comes from ...

Greetings,

Andreas

> What does your current connector config look like and which version of 
> JBoss are you running?
>
> /Johan
>
> Den 2015-06-17 19:35, Andreas Kuehne skrev:
>> Hi Folks,
>>
>> after migrating to the latest version I detected an error in the jboss
>> server log:
>>
>> 18:18:28,794 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4)
>> MSC00001: Failed to start service jboss.web.connector.httpspub:
>> org.jboss.msc.service.StartException in service
>> jboss.web.connector.httpspub: Failed to start service
>>      at
>> org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1767)
>> [jboss-msc-1.0.2.GA.jar:1.0.2.GA]
>>      at
>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
>> [rt.jar:1.7.0_79]
>>      at
>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>> [rt.jar:1.7.0_79]
>>      at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_79]
>> Caused by: java.lang.NoClassDefFoundError:
>> org/bouncycastle/jce/spec/ECPublicKeySpec
>>      at
>> org.bouncycastle.jcajce.provider.asymmetric.ec.KeyFactorySpi.engineGeneratePublic(Unknown
>> Source)
>>
>> After switching the version from 6.2.0 to 6.3.1.1 in my provisioning
>> script and setting up clean system from scratch the mentioned error
>> occurs. My quick guess is that the BC package in the ejbca.ear is not
>> yet visible to the https engine? In the old days I usually placed crypto
>> provider in the endorsed directory of the server ...
>>
>> Greetings,
>>
>> Andreas
>>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>


-- 
Andreas Kühne 
phone: +49 177 293 24 97 
mailto: ku...@tr...

Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna Amtsgericht Hamm HRB 5868

Directors Andreas Kühne, Heiko Veit

Company UK Company No: 5218868 Registered in England and Wales 

Re: [Ejbca-develop] Problem with the installation of version 6.3.1.1

[ejbca-support <ejb...@pr...>]

What does your current connector config look like and which version of 
JBoss are you running?

/Johan

Den 2015-06-17 19:35, Andreas Kuehne skrev:
> Hi Folks,
>
> after migrating to the latest version I detected an error in the jboss
> server log:
>
> 18:18:28,794 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4)
> MSC00001: Failed to start service jboss.web.connector.httpspub:
> org.jboss.msc.service.StartException in service
> jboss.web.connector.httpspub: Failed to start service
>      at
> org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1767)
> [jboss-msc-1.0.2.GA.jar:1.0.2.GA]
>      at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
> [rt.jar:1.7.0_79]
>      at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
> [rt.jar:1.7.0_79]
>      at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_79]
> Caused by: java.lang.NoClassDefFoundError:
> org/bouncycastle/jce/spec/ECPublicKeySpec
>      at
> org.bouncycastle.jcajce.provider.asymmetric.ec.KeyFactorySpi.engineGeneratePublic(Unknown
> Source)
>
> After switching the version from 6.2.0 to 6.3.1.1 in my provisioning
> script and setting up clean system from scratch the mentioned error
> occurs. My quick guess is that the BC package in the ejbca.ear is not
> yet visible to the https engine? In the old days I usually placed crypto
> provider in the endorsed directory of the server ...
>
> Greetings,
>
> Andreas
>

[Ejbca-develop] Problem with the installation of version 6.3.1.1

[Andreas K. <ku...@tr...>]

Hi Folks,

after migrating to the latest version I detected an error in the jboss
server log:

18:18:28,794 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4)
MSC00001: Failed to start service jboss.web.connector.httpspub:
org.jboss.msc.service.StartException in service
jboss.web.connector.httpspub: Failed to start service
    at
org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1767)
[jboss-msc-1.0.2.GA.jar:1.0.2.GA]
    at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
[rt.jar:1.7.0_79]
    at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
[rt.jar:1.7.0_79]
    at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_79]
Caused by: java.lang.NoClassDefFoundError:
org/bouncycastle/jce/spec/ECPublicKeySpec
    at
org.bouncycastle.jcajce.provider.asymmetric.ec.KeyFactorySpi.engineGeneratePublic(Unknown
Source)

After switching the version from 6.2.0 to 6.3.1.1 in my provisioning
script and setting up clean system from scratch the mentioned error
occurs. My quick guess is that the BC package in the ejbca.ear is not
yet visible to the https engine? In the old days I usually placed crypto
provider in the endorsed directory of the server ...

Greetings,

Andreas

-- 
Andreas Kühne 
phone: +49 177 293 24 97 
mailto: ku...@tr...

Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna Amtsgericht Hamm HRB 5868

Directors Andreas Kühne, Heiko Veit

Company UK Company No: 5218868 Registered in England and Wales 

Re: [Ejbca-develop] Beginners question about (SUB)CA renewal

[Tomas G. <to...@pr...>]

Hi,

On 2015-06-16 21:26, aw-...@mw... wrote:
> I am playing around with the current release of EJBCA having a Root CA
> and a Sub CA.
>
> I came accross some questions in relation to renew of a (Sub CA):
>
>    * When I renew a (SUB)CA I assume that a new certificate is issued and
>      signed by the Root CA. I wonder about the old/previous
>      certificates.
>       1. Can I find them somewhere in the EJBCA?
>          I can list them with cli 'ejbca ca listexpired 10000'

Should be possible yes.

>       2. Can I revoke an old certificate (renewed) of a SUBCA without
>          revoking the whole CA?

I don't think so.

>
>    * When I edit the Sub CA and check on renew the "create link
>      certificate" and "generate new key" I get an exception. I only get
>      the download link to the "link certificate"
>       1. renew with "generate new key"

Are you using the latest EJBCA 6.3.1.1?

>       2. renew a 2nd time with "create link certificate" - after this
>          step I get download links for the Link certificate
>          Is this one signed with the key I had before step 1?

This should be so yes.

Regards,
Tomas

[Ejbca-develop] Beginners question about (SUB)CA renewal

[<aw-...@mw...>]

I am playing around with the current release of EJBCA having a Root CA
and a Sub CA.

I came accross some questions in relation to renew of a (Sub CA):

  * When I renew a (SUB)CA I assume that a new certificate is issued and
    signed by the Root CA. I wonder about the old/previous
    certificates.
     1. Can I find them somewhere in the EJBCA?
        I can list them with cli 'ejbca ca listexpired 10000'
     2. Can I revoke an old certificate (renewed) of a SUBCA without
        revoking the whole CA?

  * When I edit the Sub CA and check on renew the "create link
    certificate" and "generate new key" I get an exception. I only get
    the download link to the "link certificate"
     1. renew with "generate new key"
     2. renew a 2nd time with "create link certificate" - after this
        step I get download links for the Link certificate
        Is this one signed with the key I had before step 1?


Thanks in advance for your help!

Andreas

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Manuel D. <ma...@de...>]

On Tue, Jun 16, 2015 at 4:19 AM, Wei Shan <wei...@gm...> wrote:
> I'm just thinking of this from an academic perspective, are there any
> operations in EJBCA which require strong consistency?

I think that the audit log requires strong consistency to work as it
is currently designed: Every single log entry is signed to guarantee
integrity of this log line. And every audit log entry contains a hash
value of the precedent log entry to guarantee continuity.

The audit log can be disabled, tho.

~manuel

Re: [Ejbca-develop] SignServer ( TimeStamp)

[Tomas G. <to...@pr...>]

Hi,

Good questions.
This is better addressed to the signserver-develop mailing list though. 
I'm sure you will get great answers there.

Cheers,
Tomas

On 2015-06-16 10:11, Ebtehal Hassan wrote:
> Hello all,
> I want asked about how time stamp was working and how it was put its
> stamp on the document,
> for example when i deploy signserver as PDF Signer & time  stamper what
> exactly appears to me
> please help me
>
>
> ------------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] SignServer ( TimeStamp)

[Ebtehal H. <h.e...@ya...>]

Hello all,I want asked about how time stamp was working and how it was put its stamp on the document,for example when i deploy signserver as PDF Signer & time  stamper what exactly appears to me please help me  

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Samuel L. B. <sa...@pr...>]

Hi,



On 2015-06-16 04:19, Wei Shan wrote:
> Hi,
> 
> I believe most NoSQL database support transaction, but it does usually
> only support eventual consistency as a tradeoff in CAP theorem.
> 
> I'm just thinking of this from an academic perspective, are there any
> operations in EJBCA which require strong consistency? 

I would say it depends on how you use EJBCA. For example, if you want to
limit the number of certificates an end-entity can get, then you need
strong consistency. Also, the audit log definitely needs strong
consistency for security reasons.

But OCSP could theoretically work with eventual consistency, as long as
there's some timestamp mechanism so newer writes always "win" over older
writes.

> 1. As long as the cert generation is unique, it can be stored in a
> document instead of rows. The certificate data rarely spread across 2
> tables.
> 2. I found out that, EJBCA doesn't do a lot joins in the SELECT query,
> this is perfect for MongoDB

Yes, I agree. But definitely unsupported :)

Regards,
Samuel


> 
> Please correct me if I'm wrong.
> 
> Thanks!
> 
> On 15 June 2015 at 19:26, Andreas Kuehne <ku...@tr...
> <mailto:ku...@tr...>> wrote:
> 
>     Hi Samuel,
>     assuming this is just an academic discussion: e.g. foundationdb is
>     supporting transactions on a NoSQL base.
> 
>     But just to make sure: I would never ever consider using ejbca with
>     a non-tested database!
> 
>     Greetings,
> 
>     Andreas
> 
>     Am 15. Juni 2015 11:11:10 MESZ, schrieb "Samuel Lidén Borell"
>     <sa...@pr... <mailto:sa...@pr...>>:
> 
>         Hi,
> 
>         It's not supported.
> 
>         I don't think it would work very well. EJBCA uses transactions and NoSQL
>         databases generally don't support transactions (by design, to improve
>         performance and scalability).
> 
>         Regards,
>         Samuel
> 
> 
>         On 2015-06-15 04:38, Wei Shan wrote:
> 
>             Hi all,
> 
>             Does EJBCA support any NoSQL database (Couchbase, MongoDB
>             etc..)? I know
>             it is not listed in as 1 of the supported databases.
>             However, are there
>             any plans to support it in the future?
> 
>             What's the limitations of EJBCA not being able to support
>             NoSQL databases?
> 
>             Thanks!
> 
>             -- 
>             Regards,
>             Ang Wei Shan
> 
> 
>             ------------------------------------------------------------------------
> 
> 
> 
> 
>             ------------------------------------------------------------------------
> 
>             Ejbca-develop mailing list
>             Ejb...@li...
>             <mailto:Ejb...@li...>
>             https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
> 
>         ------------------------------------------------------------------------
> 
>         ------------------------------------------------------------------------
> 
>         Ejbca-develop mailing list
>         Ejb...@li... <mailto:Ejb...@li...>
>         https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
>     --
> 
>     Andreas Kühne 
>     phone: +49 177 293 24 97 <tel:%2B49%20177%20293%2024%2097> 
>     mailto: ku...@tr... <mailto:ku...@tr...> 
> 
>     Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna
>     Amtsgericht Hamm HRB 5868 
> 
>     Directors Andreas Kühne, Heiko Veit 
> 
>     Company UK Company No: 5218868 Registered in England and Wales 
> 
>     ------------------------------------------------------------------------------
> 
>     _______________________________________________
>     Ejbca-develop mailing list
>     Ejb...@li...
>     <mailto:Ejb...@li...>
>     https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
> 
> 
> -- 
> Regards,
> Ang Wei Shan
> 
> 
> ------------------------------------------------------------------------------
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Wei S. <wei...@gm...>]

Hi,

I believe most NoSQL database support transaction, but it does usually only
support eventual consistency as a tradeoff in CAP theorem.

I'm just thinking of this from an academic perspective, are there any
operations in EJBCA which require strong consistency?

1. As long as the cert generation is unique, it can be stored in a document
instead of rows. The certificate data rarely spread across 2 tables.
2. I found out that, EJBCA doesn't do a lot joins in the SELECT query, this
is perfect for MongoDB

Please correct me if I'm wrong.

Thanks!

On 15 June 2015 at 19:26, Andreas Kuehne <ku...@tr...> wrote:

> Hi Samuel,
> assuming this is just an academic discussion: e.g. foundationdb is
> supporting transactions on a NoSQL base.
>
> But just to make sure: I would never ever consider using ejbca with a
> non-tested database!
>
> Greetings,
>
> Andreas
>
> Am 15. Juni 2015 11:11:10 MESZ, schrieb "Samuel Lidén Borell" <
> sa...@pr...>:
>>
>> Hi,
>>
>> It's not supported.
>>
>> I don't think it would work very well. EJBCA uses transactions and NoSQL
>> databases generally don't support transactions (by design, to improve
>> performance and scalability).
>>
>> Regards,
>> Samuel
>>
>>
>> On 2015-06-15 04:38, Wei Shan wrote:
>>
>>>  Hi all,
>>>
>>>  Does EJBCA support any NoSQL database (Couchbase, MongoDB etc..)? I know
>>>  it is not listed in as 1 of the supported databases. However, are there
>>>  any plans to support it in the future?
>>>
>>>  What's the limitations of EJBCA not being able to support NoSQL databases?
>>>
>>>  Thanks!
>>>
>>>  --
>>>  Regards,
>>>  Ang Wei Shan
>>>
>>>
>>> ------------------------------
>>>
>>>
>>>
>>>
>>> ------------------------------
>>>
>>>  Ejbca-develop mailing list
>>>  Ejb...@li...
>>>  https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>>
>>
>> ------------------------------
>>
>> ------------------------------
>>
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>
>>
> --
>
> Andreas Kühne
> phone: +49 177 293 24 97
> mailto: ku...@tr...
>
> Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna
> Amtsgericht Hamm HRB 5868
>
> Directors Andreas Kühne, Heiko Veit
>
> Company UK Company No: 5218868 Registered in England and Wales
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>


-- 
Regards,
Ang Wei Shan

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Andreas K. <ku...@tr...>]

Hi Samuel,
assuming this is just an academic discussion: e.g. foundationdb is supporting  transactions on a NoSQL base.

But just to make sure: I would never ever consider using ejbca with a non-tested database!

Greetings,

Andreas

Am 15. Juni 2015 11:11:10 MESZ, schrieb "Samuel Lidén Borell" <sa...@pr...>:
>Hi,
>
>It's not supported.
>
>I don't think it would work very well. EJBCA uses transactions and
>NoSQL
>databases generally don't support transactions (by design, to improve
>performance and scalability).
>
>Regards,
>Samuel
>
>
>On 2015-06-15 04:38, Wei Shan wrote:
>> Hi all,
>> 
>> Does EJBCA support any NoSQL database (Couchbase, MongoDB etc..)? I
>know
>> it is not listed in as 1 of the supported databases. However, are
>there
>> any plans to support it in the future?
>> 
>> What's the limitations of EJBCA not being able to support NoSQL
>databases?
>> 
>> Thanks!
>> 
>> -- 
>> Regards,
>> Ang Wei Shan
>> 
>> 
>>
>------------------------------------------------------------------------------
>> 
>> 
>> 
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>> 
>
>
>------------------------------------------------------------------------------
>_______________________________________________
>Ejbca-develop mailing list
>Ejb...@li...
>https://lists.sourceforge.net/lists/listinfo/ejbca-develop

--

Andreas Kühne 
phone: +49 177 293 24 97 
mailto: ku...@tr... 

Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna Amtsgericht Hamm HRB 5868 

Directors Andreas Kühne, Heiko Veit 

Company UK Company No: 5218868 Registered in England and Wales 

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Samuel L. B. <sa...@pr...>]

Hi,

It's not supported.

I don't think it would work very well. EJBCA uses transactions and NoSQL
databases generally don't support transactions (by design, to improve
performance and scalability).

Regards,
Samuel


On 2015-06-15 04:38, Wei Shan wrote:
> Hi all,
> 
> Does EJBCA support any NoSQL database (Couchbase, MongoDB etc..)? I know
> it is not listed in as 1 of the supported databases. However, are there
> any plans to support it in the future?
> 
> What's the limitations of EJBCA not being able to support NoSQL databases?
> 
> Thanks!
> 
> -- 
> Regards,
> Ang Wei Shan
> 
> 
> ------------------------------------------------------------------------------
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 

Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Andreas K. <ku...@tr...>]

Hi Ang Wei,
as the name suggests the base technology is enterprise Java beans. The way persistence is done is highly customizable. It would guess you use any persistente layer you like ... not a concern for the actual implementation.

Greetings,
Andreas

Am 15. Juni 2015 04:38:42 MESZ, schrieb Wei Shan <wei...@gm...>:
>Hi all,
>
>Does EJBCA support any NoSQL database (Couchbase, MongoDB etc..)? I
>know it
>is not listed in as 1 of the supported databases. However, are there
>any
>plans to support it in the future?
>
>What's the limitations of EJBCA not being able to support NoSQL
>databases?
>
>Thanks!
>
>-- 
>Regards,
>Ang Wei Shan
>
>
>------------------------------------------------------------------------
>
>------------------------------------------------------------------------------
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Ejbca-develop mailing list
>Ejb...@li...
>https://lists.sourceforge.net/lists/listinfo/ejbca-develop

--

Andreas Kühne 
phone: +49 177 293 24 97 
mailto: ku...@tr... 

Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna Amtsgericht Hamm HRB 5868 

Directors Andreas Kühne, Heiko Veit 

Company UK Company No: 5218868 Registered in England and Wales 

[Ejbca-develop] Does EJBCA support NoSQL database

[Wei S. <wei...@gm...>]

Hi all,

Does EJBCA support any NoSQL database (Couchbase, MongoDB etc..)? I know it
is not listed in as 1 of the supported databases. However, are there any
plans to support it in the future?

What's the limitations of EJBCA not being able to support NoSQL databases?

Thanks!

-- 
Regards,
Ang Wei Shan

Re: [Ejbca-develop] Error no client certificate recieved used for authentication

[Tomas G. <to...@pr...>]

Hi,

You can look how it is done in the EJBCA clientToolBox WebService 
command line interface. The source code is included.

Cheers,
Tomas
-----
Save time and money with an Enterprise support subscription. Please see 
www.primekey.se for more information.
https://www.primekey.se/technologies/products-overview/
https://www.primekey.se/service-support/support/

On 2015-06-04 16:24, Raadush wrote:
> Hello. Im trying to use ejbca's web service interface, but when I try
> call some method, I
> recieve "AuthorizationDeniedException_Exception:Error no client
> certificate recieved used for authentication". I suppose I have to add
> client certificate authorization somewhere, but got no idea how to. Can
> somebody show me the right way of doing so? My simple class is here
> (exception is thrown ar service.certificateRequest call. I also tired
> call webservice through SoapUi only to get the very same exception):
>
> public class EjbcConnector {
>
>      EjbcaWS service;
>
>      public EjbcConnector() {
>          JaxWsProxyFactoryBean factory = new JaxWsProxyFactoryBean();
>          factory.setServiceClass(EjbcaWS.class);
>          factory.setAddress("http://localhost:8080/ejbca/ejbcaws/ejbcaws");
>          service = (EjbcaWS) factory.create();
>
>      }
>
>      public String certificateRequest(String certificate) throws Exception {
>
>          UserDataVOWS userData = new UserDataVOWS();
>          userData.setUsername("Test");
>          userData.setPassword("Test");
>          userData.setCaName("ManagementCA");
>          try {
>              CertificateResponse response =
> service.certificateRequest(userData, certificate, 0, null, "CERTIFICATE");
>              return Base64.encodeBase64String(response.getData());
>          } catch (Exception ex) {
>              throw ex;
>          }
>      }
>
> }
>
>
> ------------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] Error no client certificate recieved used for authentication

[Raadush <ra...@gm...>]

Hello. Im trying to use ejbca's web service interface, but when I try call
some method, I recieve "AuthorizationDeniedException_Exception: Error no
client certificate recieved used for authentication". I suppose I have to
add client certificate authorization somewhere, but got no idea how to. Can
somebody show me the right way of doing so? My simple class is here
(exception is thrown ar service.certificateRequest call. I also tired call
webservice through SoapUi only to get the very same exception):

public class EjbcConnector {

    EjbcaWS service;

    public EjbcConnector() {

        JaxWsProxyFactoryBean factory = new JaxWsProxyFactoryBean();
        factory.setServiceClass(EjbcaWS.class);
        factory.setAddress("http://localhost:8080/ejbca/ejbcaws/ejbcaws");
        service = (EjbcaWS) factory.create();

    }

    public String certificateRequest(String certificate) throws Exception {

        UserDataVOWS userData = new UserDataVOWS();
        userData.setUsername("Test");
        userData.setPassword("Test");
        userData.setCaName("ManagementCA");

        try {
            CertificateResponse response =
service.certificateRequest(userData, certificate, 0, null, "CERTIFICATE");
            return Base64.encodeBase64String(response.getData());
        } catch (Exception ex) {
            throw ex;
        }
    }

}

Re: [Ejbca-develop] User Verfication

[Tomas G. <to...@pr...>]

Since the user can not revoke his certificate himself. It is up to the 
organization receiving the revocation request (paper, telephone, web 
page?) to verify the identify.
Signing a revocation request with the old private key to be revoked perhaps?

Regards,
Tomas
**********
PrimeKey Solutions AB
Lundagatan 16, 171 63 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 2015-06-03 07:51, Ebtehal Hassan wrote:
> Hi all;
> I want to ask if user request to revoke his certificate after issuing it
> for some reason how to verify the user identity
> and be sure if he owner that certificate really ???
>
>
>
> ------------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] User Verfication

[Ebtehal H. <h.e...@ya...>]

Hi all;I want to ask if user request to revoke his certificate after issuing it for some reason how to verify the user identity and be sure if he owner that certificate really ???

Re: [Ejbca-develop] Generate key and certificate for Timestamp

[Tomas G. <to...@pr...>]

Hi,

There are simply checkbox options for this in a Certificate Profile.

Regards,
Tomas
-----
Save time and money with an Enterprise support subscription. Please see 
www.primekey.se for more information.
https://www.primekey.se/technologies/products-overview/
https://www.primekey.se/service-support/support/

On 2015-06-02 09:46, Marcin Fabianczyk wrote:
> Hello,
>
> How I can generate a key and certificate for the timestamp service in
> signserver with options:
>         - Extended key usage timeStamping
>         - The extended key usage extension must be present and marked as
> critical
>
> Regards,
> Martin
>
>
>
>
>
>
> ------------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] Generate key and certificate for Timestamp

[Marcin F. <mar...@en...>]

Hello,

How I can generate a key and certificate for the timestamp service in signserver with options:
       - Extended key usage timeStamping
       - The extended key usage extension must be present and marked as critical

Regards,
Martin