ejbca-develop — Development discussions

Re: [Ejbca-develop] (no subject)

[Tomas G. <to...@pr...>]

I have a feature that I'd like to see.

Implement support, with GUI, for "Name Constraints".

Name constraints are defined in RFC5280, "4.2.1.10.  Name Constraints".

Only dnsName, rfc822Name and iPAddress are needed in practice.

Cheers,
Tomas

On 03/05/2013 01:34 PM, djouani ramissa wrote:
> Hi ,
>
> Actually Im  looking for a module to add in EJBCA , and this will be
> the subject of my graduation as a computer science engineer .
>
> would you please suggest something to developp and contribute in EJBCA
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

Re: [Ejbca-develop] RAadminsession not bound

[Tomas G. <to...@pr...>]

Hi,

I do not thing your JBoss is up and running correctly. You need to check 
server.log when starting JBoss.

See http://www.ejbca.org/adminguide.html#Troubleshooting
for general tips about troubleshooting.

Cheers,
Tomas
-----
PrimeKey Solutions offers commercial EJBCA and SignServer support 
subscriptions and training courses. Please see www.primekey.se or 
contact in...@pr... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

On 03/06/2013 09:17 AM, eilaf sorkatti wrote:
> Hi,
>
> When I try to add users using command line I get the following problem:
>
>
>
> org.ejbca.core.ejb.ServiceLocatorException:
> javax.naming.NameNotFoundException: RaAdminSession not bound
>      at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:160)
>      at
> org.ejbca.core.ejb.ServiceLocator.getRemoteHome(ServiceLocator.java:85)
>      at org.ejbca.ui.cli.BaseCommand.getRaAdminSession(BaseCommand.java:228)
>      at
> org.ejbca.ui.cli.ra.RaAddUserCommand.execute(RaAddUserCommand.java:53)
>      at org.ejbca.ui.cli.EjbcaEjbCli.executeCommand(EjbcaEjbCli.java:117)
>      at org.ejbca.ui.cli.EjbcaEjbCli.main(EjbcaEjbCli.java:79)
> Caused by: javax.naming.NameNotFoundException: RaAdminSession not bound
>      at org.jnp.server.NamingServer.getBinding(NamingServer.java:771)
>      at org.jnp.server.NamingServer.getBinding(NamingServer.java:779)
>      at org.jnp.server.NamingServer.getObject(NamingServer.java:785)
>      at org.jnp.server.NamingServer.lookup(NamingServer.java:443)
>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>      at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>      at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>      at java.lang.reflect.Method.invoke(Method.java:616)
>      at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:322)
>      at sun.rmi.transport.Transport$1.run(Transport.java:177)
>      at java.security.AccessController.doPrivileged(Native Method)
>      at sun.rmi.transport.Transport.serviceCall(Transport.java:173)
>      at
> sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:553)
>      at
> sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:808)
>      at
> sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:667)
>      at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
>      at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>      at java.lang.Thread.run(Thread.java:679)
>      at
> sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:273)
>      at
> sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:251)
>      at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:160)
>      at org.jnp.server.NamingServer_Stub.lookup(Unknown Source)
>      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:726)
>      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686)
>      at javax.naming.InitialContext.lookup(InitialContext.java:409)
>      at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:158)
>      ... 5 more
> Could not run execute method for class class
> org.ejbca.ui.cli.ra.RaAddUserCommand
> org.ejbca.ui.cli.ErrorAdminCommandException: java.lang.RuntimeException:
> org.ejbca.core.ejb.ServiceLocatorException:
> javax.naming.NameNotFoundException: RaAdminSession not bound
>      at
> org.ejbca.ui.cli.ra.RaAddUserCommand.execute(RaAddUserCommand.java:267)
>      at org.ejbca.ui.cli.EjbcaEjbCli.executeCommand(EjbcaEjbCli.java:117)
>      at org.ejbca.ui.cli.EjbcaEjbCli.main(EjbcaEjbCli.java:79)
> Caused by: java.lang.RuntimeException:
> org.ejbca.core.ejb.ServiceLocatorException:
> javax.naming.NameNotFoundException: RaAdminSession not bound
>      at org.ejbca.ui.cli.BaseCommand.getRaAdminSession(BaseCommand.java:233)
>      at
> org.ejbca.ui.cli.ra.RaAddUserCommand.execute(RaAddUserCommand.java:53)
>      ... 2 more
> Caused by: org.ejbca.core.ejb.ServiceLocatorException:
> javax.naming.NameNotFoundException: RaAdminSession not bound
>      at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:160)
>      at
> org.ejbca.core.ejb.ServiceLocator.getRemoteHome(ServiceLocator.java:85)
>      at org.ejbca.ui.cli.BaseCommand.getRaAdminSession(BaseCommand.java:228)
>      ... 3 more
> Caused by: javax.naming.NameNotFoundException: RaAdminSession not bound
>      at org.jnp.server.NamingServer.getBinding(NamingServer.java:771)
>      at org.jnp.server.NamingServer.getBinding(NamingServer.java:779)
>      at org.jnp.server.NamingServer.getObject(NamingServer.java:785)
>      at org.jnp.server.NamingServer.lookup(NamingServer.java:443)
>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>      at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>      at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>      at java.lang.reflect.Method.invoke(Method.java:616)
>      at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:322)
>      at sun.rmi.transport.Transport$1.run(Transport.java:177)
>      at java.security.AccessController.doPrivileged(Native Method)
>      at sun.rmi.transport.Transport.serviceCall(Transport.java:173)
>      at
> sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:553)
>      at
> sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:808)
>      at
> sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:667)
>      at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
>      at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>      at java.lang.Thread.run(Thread.java:679)
>      at
> sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:273)
>      at
> sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:251)
>      at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:160)
>      at org.jnp.server.NamingServer_Stub.lookup(Unknown Source)
>      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:726)
>      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686)
>      at javax.naming.InitialContext.lookup(InitialContext.java:409)
>      at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:158)
>      ... 5 more
>
>
>
> What the problem could be?
>
> Thanks for your support
> Regards,
>
> --
> Eilaf Hamad Elnil Mugbil
> University Of Khartoum
> School Of Mathematical science
>
>
> ------------------------------------------------------------------------------
> Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester
> Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the
> endpoint security space. For insight on selecting the right partner to
> tackle endpoint security challenges, access the full report.
> http://p.sf.net/sfu/symantec-dev2dev
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] RAadminsession not bound

[eilaf s. <eil...@gm...>]

Hi,

When I try to add users using command line I get the following problem:



org.ejbca.core.ejb.ServiceLocatorException:
javax.naming.NameNotFoundException: RaAdminSession not bound
    at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:160)
    at
org.ejbca.core.ejb.ServiceLocator.getRemoteHome(ServiceLocator.java:85)
    at org.ejbca.ui.cli.BaseCommand.getRaAdminSession(BaseCommand.java:228)
    at
org.ejbca.ui.cli.ra.RaAddUserCommand.execute(RaAddUserCommand.java:53)
    at org.ejbca.ui.cli.EjbcaEjbCli.executeCommand(EjbcaEjbCli.java:117)
    at org.ejbca.ui.cli.EjbcaEjbCli.main(EjbcaEjbCli.java:79)
Caused by: javax.naming.NameNotFoundException: RaAdminSession not bound
    at org.jnp.server.NamingServer.getBinding(NamingServer.java:771)
    at org.jnp.server.NamingServer.getBinding(NamingServer.java:779)
    at org.jnp.server.NamingServer.getObject(NamingServer.java:785)
    at org.jnp.server.NamingServer.lookup(NamingServer.java:443)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
    at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:616)
    at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:322)
    at sun.rmi.transport.Transport$1.run(Transport.java:177)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.Transport.serviceCall(Transport.java:173)
    at
sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:553)
    at
sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:808)
    at
sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:667)
    at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
    at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:679)
    at
sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:273)
    at
sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:251)
    at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:160)
    at org.jnp.server.NamingServer_Stub.lookup(Unknown Source)
    at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:726)
    at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686)
    at javax.naming.InitialContext.lookup(InitialContext.java:409)
    at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:158)
    ... 5 more
Could not run execute method for class class
org.ejbca.ui.cli.ra.RaAddUserCommand
org.ejbca.ui.cli.ErrorAdminCommandException: java.lang.RuntimeException:
org.ejbca.core.ejb.ServiceLocatorException:
javax.naming.NameNotFoundException: RaAdminSession not bound
    at
org.ejbca.ui.cli.ra.RaAddUserCommand.execute(RaAddUserCommand.java:267)
    at org.ejbca.ui.cli.EjbcaEjbCli.executeCommand(EjbcaEjbCli.java:117)
    at org.ejbca.ui.cli.EjbcaEjbCli.main(EjbcaEjbCli.java:79)
Caused by: java.lang.RuntimeException:
org.ejbca.core.ejb.ServiceLocatorException:
javax.naming.NameNotFoundException: RaAdminSession not bound
    at org.ejbca.ui.cli.BaseCommand.getRaAdminSession(BaseCommand.java:233)
    at
org.ejbca.ui.cli.ra.RaAddUserCommand.execute(RaAddUserCommand.java:53)
    ... 2 more
Caused by: org.ejbca.core.ejb.ServiceLocatorException:
javax.naming.NameNotFoundException: RaAdminSession not bound
    at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:160)
    at
org.ejbca.core.ejb.ServiceLocator.getRemoteHome(ServiceLocator.java:85)
    at org.ejbca.ui.cli.BaseCommand.getRaAdminSession(BaseCommand.java:228)
    ... 3 more
Caused by: javax.naming.NameNotFoundException: RaAdminSession not bound
    at org.jnp.server.NamingServer.getBinding(NamingServer.java:771)
    at org.jnp.server.NamingServer.getBinding(NamingServer.java:779)
    at org.jnp.server.NamingServer.getObject(NamingServer.java:785)
    at org.jnp.server.NamingServer.lookup(NamingServer.java:443)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
    at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:616)
    at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:322)
    at sun.rmi.transport.Transport$1.run(Transport.java:177)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.Transport.serviceCall(Transport.java:173)
    at
sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:553)
    at
sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:808)
    at
sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:667)
    at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
    at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:679)
    at
sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:273)
    at
sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:251)
    at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:160)
    at org.jnp.server.NamingServer_Stub.lookup(Unknown Source)
    at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:726)
    at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686)
    at javax.naming.InitialContext.lookup(InitialContext.java:409)
    at org.ejbca.core.ejb.ServiceLocator.getObject(ServiceLocator.java:158)
    ... 5 more



What the problem could be?

Thanks for your support
Regards,

-- 
Eilaf Hamad Elnil Mugbil
University Of Khartoum
School Of Mathematical science

Re: [Ejbca-develop] EJBCA Batch Enrollment GUI

[sara <sa...@nc...>]

On 03/05/2013 04:48 PM, Tomas Gustavsson wrote:

hi
the problem solved
it turned out that i had something wrong in my JBoss configurations
thank you very much for your help
regards,
sara
> Check your JBoss configuration according to:
> http://www.ejbca.org/installation.html#JBoss
>
> Pay special attention to "JBoss 5.1 WS WSDL location".
>
> Regards,
> Tomas
> **********
> PrimeKey Solutions AB
> Anderstorpsvägen 16, 171 54 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
>
> On 03/05/2013 02:35 AM, sara wrote:
>>
>> hi
>> i tried to use EJBCA Batch Enrollment GUI to enroll several certificates
>> at the same time.
>> the GUI open and i can add the CSRs but then i can't defined the CA or
>> the end entity or any other thing.
>> and this error appers at the terminal:
>> Mar 5, 2013 4:09:36 AM org.jdesktop.application.Task failed
>> SEVERE:
>> org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask@805298
>> failed: com.sun.xml.internal.ws.client.ClientTransportException: The
>> server sent HTTP status code 302: Moved Temporarily
>> com.sun.xml.internal.ws.client.ClientTransportException: The server sent
>> HTTP status code 302: Moved Temporarily
>>        at
>> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.checkStatusCode(HttpTransportPipe.java:196)
>>        at
>> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:168)
>>        at
>> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:83)
>>        at
>> com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(DeferredTransportPipe.java:105)
>>        at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Fiber.java:587)
>>        at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Fiber.java:546)
>>        at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Fiber.java:531)
>>        at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Fiber.java:428)
>>        at com.sun.xml.internal.ws.client.Stub.process(Stub.java:211)
>>        at
>> com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(SEIStub.java:124)
>>        at
>> com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:98)
>>        at
>> com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:78)
>>        at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(SEIStub.java:107)
>>        at sun.proxy.$Proxy27.getAvailableCAs(Unknown Source)
>>        at
>> org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask.doInBackground(BatchEnrollmentGUIView.java:1151)
>>        at org.jdesktop.swingworker.SwingWorker$1.call(Unknown Source)
>>        at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
>>        at java.util.concurrent.FutureTask.run(FutureTask.java:166)
>>        at org.jdesktop.swingworker.SwingWorker.run(Unknown Source)
>>        at
>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
>>        at
>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>>        at java.lang.Thread.run(Thread.java:679)
>>
>> can you help me?!
>> thank you.
>>
>> regards,
>> sara
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Everyone hates slow websites. So do we.
>> Make your web apps faster with AppDynamics
>> Download AppDynamics Lite for free today:
>> http://p.sf.net/sfu/appdyn_d2d_feb
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

Re: [Ejbca-develop] EJBCA Batch Enrollment GUI

[sara <sa...@nc...>]

thank you for your fast reply
i followed all the steps and nothing is wrong with my JBoss configuration.
but i still got the same error :




"
0    [AWT-EventQueue-0] DEBUG 
org.ejbca.batchenrollmentgui.ConnectDialog  - Trying to load from file 
/home/sara/sara/ejbca/modules/batchenrollment-gui/connect.properties
tableChanged
Mar 5, 2013 9:10:01 PM org.jdesktop.application.Task failed
SEVERE: 
org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask@1d07e4 
failed: com.sun.xml.internal.ws.client.ClientTransportException: The 
server sent HTTP status code 302: Moved Temporarily
com.sun.xml.internal.ws.client.ClientTransportException: The server sent 
HTTP status code 302: Moved Temporarily
     at 
com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.checkStatusCode(HttpTransportPipe.java:196)
     at 
com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:168)
     at 
com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:83)
     at 
com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(DeferredTransportPipe.java:105)
     at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Fiber.java:587)
     at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Fiber.java:546)
     at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Fiber.java:531)
     at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Fiber.java:428)
     at com.sun.xml.internal.ws.client.Stub.process(Stub.java:211)
     at 
com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(SEIStub.java:124)
     at 
com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:98)
     at 
com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:78)
     at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(SEIStub.java:107)
     at sun.proxy.$Proxy27.getAvailableCAs(Unknown Source)
     at 
org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask.doInBackground(BatchEnrollmentGUIView.java:1151)
     at org.jdesktop.swingworker.SwingWorker$1.call(Unknown Source)
     at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
     at java.util.concurrent.FutureTask.run(FutureTask.java:166)
     at org.jdesktop.swingworker.SwingWorker.run(Unknown Source)
     at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
     at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
     at java.lang.Thread.run(Thread.java:679)
"

regards,
sara

Re: [Ejbca-develop] EJBCA OCSP responder port number

[Tham W. <ejb...@pr...>]

Hi Kevin,

I usually use an apache proxy on another machine or sometimes the same 
machine. This way you also get to choose any address you want, for 
example 'http://<ip-address>/ocsp'

Or alternatively you could just change the below properties in 
web.properties to use any unused port of your own choosing:

# The public port JBoss will listen to http on
# Default 8080
#httpserver.pubhttp=8080

# The public port JBoss will listen to https on, no client cert required
# Default 8442
#httpserver.pubhttps=8442

# The private port JBoss will listen to https on, client cert required
# Default 8443
#httpserver.privhttps=8443

Cheers,
Tham Wickenberg
PKI Specialist
PrimeKey Solutions


On 3/5/13 10:31 PM, 孙伟 wrote:
> I got a question on the port number. I am right now using the url 
> http://<ip-address>:8080/ejbca/publicweb/status/ocsp as the responder 
> locator, is there anyway that I can change the default port to others, 
> ie, 80?
>
> Thanks,
> Kevin

[Ejbca-develop] EJBCA OCSP responder port number

[孙伟 <kev...@gm...>]

Hi,

I am currently testing with EJBCA OCSP function. I got a question on the
port number. I am right now using the url
http://<ip-address>:8080/ejbca/publicweb/status/ocsp
as the responder locator, is there anyway that I can change the default
port to others, ie, 80?

Thanks,
Kevin

Re: [Ejbca-develop] EJBCA Batch Enrollment GUI

[Tomas G. <to...@pr...>]

Check your JBoss configuration according to:
http://www.ejbca.org/installation.html#JBoss

Pay special attention to "JBoss 5.1 WS WSDL location".

Regards,
Tomas
**********
PrimeKey Solutions AB
Anderstorpsvägen 16, 171 54 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 03/05/2013 02:35 AM, sara wrote:
>
>
> hi
> i tried to use EJBCA Batch Enrollment GUI to enroll several certificates
> at the same time.
> the GUI open and i can add the CSRs but then i can't defined the CA or
> the end entity or any other thing.
> and this error appers at the terminal:
> Mar 5, 2013 4:09:36 AM org.jdesktop.application.Task failed
> SEVERE:
> org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask@805298
> failed: com.sun.xml.internal.ws.client.ClientTransportException: The
> server sent HTTP status code 302: Moved Temporarily
> com.sun.xml.internal.ws.client.ClientTransportException: The server sent
> HTTP status code 302: Moved Temporarily
>       at
> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.checkStatusCode(HttpTransportPipe.java:196)
>       at
> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:168)
>       at
> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:83)
>       at
> com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(DeferredTransportPipe.java:105)
>       at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Fiber.java:587)
>       at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Fiber.java:546)
>       at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Fiber.java:531)
>       at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Fiber.java:428)
>       at com.sun.xml.internal.ws.client.Stub.process(Stub.java:211)
>       at
> com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(SEIStub.java:124)
>       at
> com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:98)
>       at
> com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:78)
>       at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(SEIStub.java:107)
>       at sun.proxy.$Proxy27.getAvailableCAs(Unknown Source)
>       at
> org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask.doInBackground(BatchEnrollmentGUIView.java:1151)
>       at org.jdesktop.swingworker.SwingWorker$1.call(Unknown Source)
>       at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
>       at java.util.concurrent.FutureTask.run(FutureTask.java:166)
>       at org.jdesktop.swingworker.SwingWorker.run(Unknown Source)
>       at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
>       at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>       at java.lang.Thread.run(Thread.java:679)
>
> can you help me?!
> thank you.
>
> regards,
> sara
>
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] EJBCA Batch Enrollment GUI

[sara <sa...@nc...>]

hi
i tried to use EJBCA Batch Enrollment GUI to enroll several certificates
at the same time.
the GUI open and i can add the CSRs but then i can't defined the CA or
the end entity or any other thing.
and this error appers at the terminal:
Mar 5, 2013 4:09:36 AM org.jdesktop.application.Task failed
SEVERE:
org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask@805298
failed: com.sun.xml.internal.ws.client.ClientTransportException: The
server sent HTTP status code 302: Moved Temporarily
com.sun.xml.internal.ws.client.ClientTransportException: The server sent
HTTP status code 302: Moved Temporarily
     at
com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.checkStatusCode(HttpTransportPipe.java:196)
     at
com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:168)
     at
com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:83)
     at
com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(DeferredTransportPipe.java:105)
     at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Fiber.java:587)
     at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Fiber.java:546)
     at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Fiber.java:531)
     at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Fiber.java:428)
     at com.sun.xml.internal.ws.client.Stub.process(Stub.java:211)
     at
com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(SEIStub.java:124)
     at
com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:98)
     at
com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:78)
     at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(SEIStub.java:107)
     at sun.proxy.$Proxy27.getAvailableCAs(Unknown Source)
     at
org.ejbca.batchenrollmentgui.BatchEnrollmentGUIView$RefreshEndEntitiesTask.doInBackground(BatchEnrollmentGUIView.java:1151)
     at org.jdesktop.swingworker.SwingWorker$1.call(Unknown Source)
     at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
     at java.util.concurrent.FutureTask.run(FutureTask.java:166)
     at org.jdesktop.swingworker.SwingWorker.run(Unknown Source)
     at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
     at java.lang.Thread.run(Thread.java:679)

can you help me?!
thank you.

regards,
sara

[Ejbca-develop] (no subject)

[djouani r. <djo...@gm...>]

Hi ,

Actually Im  looking for a module to add in EJBCA , and this will be
the subject of my graduation as a computer science engineer .

would you please suggest something to developp and contribute in EJBCA

Re: [Ejbca-develop] Antwort: External OCSP server responder problem

[ejbca-support <ejb...@pr...>]

On 2013-02-27 08:13, Dhaks wrote:


Haven't we already answered this?

Here it is again:

http://www.ejbca.org/userguide-ocsp.html#OCSP extensions

If there is something else you request you have to describe it
in a more concrete way.

Cheers
Anders
tech support

> 
> Actually CA generated by using my own not in using EJBCA
> if i want to get ocsp response with my certificate which is generated by
> me,so how to get response some other extra attribute , how to do it.....
> please help me
> thanks in advance
> Regards
> G.Lenin
> 
> Dhaks wrote:
>>
>> External CA Meaning in the sense, CA issued by us not in by EJBCA,
>> with my own CA how to get  response from the EJBCA....
>>
>>
>> Tomas Gustavsson wrote:
>>>
>>>
>>> What do you mean by "External CA"?
>>>
>>> How did you create this "External CA" in the first place?
>>>
>>> /Tomas
>>>
>>>
>>> **********
>>> PrimeKey Solutions AB
>>> Anderstorpsvägen 16, 171 54 Solna, Sweden
>>> Mob: +46 (0)707421096
>>> Internet: www.primekey.se
>>> Twitter: twitter.com/primekeyPKI
>>> **********
>>>
>>> On 01/04/2013 11:11 AM, Dhaks wrote:
>>>>
>>>> when activating CA via CA activate  the following message giving
>>>>
>>>>
>>>>   Message: NICCA2011: 	CA Activation Successful.
>>>> 	Message: CCAIndia2011: 	CA Activation Successful.
>>>> 	Message: NICsub-CA_for_NIC_2011: 	CA Activation Successful.
>>>>
>>>>
>>>> But it is not activating the CA
>>>> we are struggling for this past one month.
>>>> i hope u will give right solution to solve it
>>>>
>>>> Hi,
>>>>
>>>> have you activated the CA via "CA Activation"?
>>>>
>>>> Patrick
>>>>
>>>>
>>>> http://www.kaufland.de
>>>> http://www.spannende-it.de
>>>>
>>>> Wir bleiben die Nr. 1:
>>>> Kaufland ist "Bester Lebensmittelmarkt 2012"!
>>>>
>>>> Kaufland Informationssysteme GmbH & Co. KG
>>>> Postfach 12 53 - 74149 Neckarsulm
>>>> Kommanditgesellschaft
>>>> Sitz: Neckarsulm
>>>> Registergericht: Stuttgart HRA 104163
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Von:	Dhaks <g....@ni...>
>>>> An:	ejb...@li...
>>>> Datum:	04.01.2013 05:08
>>>> Betreff:	[Ejbca-develop]  External OCSP server responder problem
>>>>
>>>>
>>>>
>>>>
>>>> When we are trying to get response status for CA which is issued by
>>>> EJBCA
>>>> ,it's working fine from the OCSP Client(Using openSSL command), But
>>>> trying
>>>> with External CA which is already imported into ejbca database ,it's
>>>> throwing NULL Pointer exception in server side log where as  client side
>>>> getting the below error
>>>>
>>>> "ERROR QUERYING OCSP RESPONDER"
>>>> and EJBCA AdminGUI the CA shows "CA not active"
>>>>
>>>> Server Side Error is in blow
>>>>
>>>>
>>>>
>>>> Error processing OCSP request. Message: java.lang.RuntimeException:
>>>> java.lang.NullPointerException.
>>>> javax.ejb.EJBException: java.lang.RuntimeException:
>>>> java.lang.NullPointerException
>>>> 		 at
>>>> org.jboss.ejb3.tx.Ejb3TxPolicy.handleExceptionInOurTx(Ejb3TxPolicy.java:77)
>>>> 		 at org.jboss.aspects.tx.TxPolicy.invokeInOurTx
>>>> (TxPolicy.java:83)
>>>> 		 at
>>>> org.jboss.aspects.tx.TxInterceptor$Required.invoke(TxInterceptor.java:190)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.aspects.tx.TxPropagationInterceptor.invoke
>>>> (TxPropagationInterceptor.java:76)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at org.jboss.ejb3.tx.NullInterceptor.invoke
>>>> (NullInterceptor.java:42)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.security.RoleBasedAuthorizationInterceptorv2.invoke
>>>> (RoleBasedAuthorizationInterceptorv2.java:201)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.security.Ejb3AuthenticationInterceptorv2.invoke
>>>> (Ejb3AuthenticationInterceptorv2.java:186)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.ENCPropagationInterceptor.invoke
>>>> (ENCPropagationInterceptor.java:41)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.BlockContainerShutdownInterceptor.invoke
>>>> (BlockContainerShutdownInterceptor.java:67)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.aspects.currentinvocation.CurrentInvocationInterceptor.invoke
>>>> (CurrentInvocationInterceptor.java:67)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.session.SessionSpecContainer.invoke
>>>> (SessionSpecContainer.java:176)
>>>> 		 at
>>>> org.jboss.ejb3.session.SessionSpecContainer.invoke
>>>> (SessionSpecContainer.java:216)
>>>> 		 at
>>>> org.jboss.ejb3.proxy.impl.handler.session.SessionProxyInvocationHandlerBase.invoke
>>>> (SessionProxyInvocationHandlerBase.java:207)
>>>> 		 at
>>>> org.jboss.ejb3.proxy.impl.handler.session.SessionProxyInvocationHandlerBase.invoke
>>>> (SessionProxyInvocationHandlerBase.java:164)
>>>> 		 at $Proxy492.extendedService(Unknown Source)
>>>> 		 at
>>>> org.ejbca.ui.web.protocol.OCSPServlet.extendedService(OCSPServlet.java:60)
>>>> 		 at
>>>> org.ejbca.ui.web.protocol.OCSPServletBase.signOCSPResponse
>>>> (OCSPServletBase.java:223)
>>>> 		 at
>>>> org.ejbca.ui.web.protocol.OCSPServletBase.serviceOCSP
>>>> (OCSPServletBase.java:905)
>>>> 		 at
>>>> org.ejbca.ui.web.protocol.OCSPServletBase.doPost(OCSPServletBase.java:375)
>>>> 		 at javax.servlet.http.HttpServlet.service
>>>> (HttpServlet.java:637)
>>>> 		 at javax.servlet.http.HttpServlet.service
>>>> (HttpServlet.java:717)
>>>> 		 at
>>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter
>>>> (ApplicationFilterChain.java:290)
>>>> 		 at
>>>> org.apache.catalina.core.ApplicationFilterChain.doFilter
>>>> (ApplicationFilterChain.java:206)
>>>> 		 at
>>>> org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter
>>>> (ReplyHeaderFilter.java:96)
>>>> 		 at
>>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter
>>>> (ApplicationFilterChain.java:235)
>>>> 		 at
>>>> org.apache.catalina.core.ApplicationFilterChain.doFilter
>>>> (ApplicationFilterChain.java:206)
>>>> 		 at
>>>> org.apache.catalina.core.StandardWrapperValve.invoke
>>>> (StandardWrapperValve.java:235)
>>>> 		 at
>>>> org.apache.catalina.core.StandardContextValve.invoke
>>>> (StandardContextValve.java:191)
>>>> 		 at
>>>> org.jboss.web.tomcat.security.SecurityAssociationValve.invoke
>>>> (SecurityAssociationValve.java:190)
>>>> 		 at
>>>> org.apache.catalina.authenticator.AuthenticatorBase.invoke
>>>> (AuthenticatorBase.java:433)
>>>> 		 at
>>>> org.jboss.web.tomcat.security.JaccContextValve.invoke
>>>> (JaccContextValve.java:92)
>>>> 		 at
>>>> org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process
>>>> (SecurityContextEstablishmentValve.java:126)
>>>> 		 at
>>>> org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke
>>>> (SecurityContextEstablishmentValve.java:70)
>>>> 		 at
>>>> org.apache.catalina.core.StandardHostValve.invoke
>>>> (StandardHostValve.java:127)
>>>> 		 at
>>>> org.apache.catalina.valves.ErrorReportValve.invoke
>>>> (ErrorReportValve.java:102)
>>>> 		 at
>>>> org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke
>>>> (CachedConnectionValve.java:158)
>>>> 		 at
>>>> org.apache.catalina.core.StandardEngineValve.invoke
>>>> (StandardEngineValve.java:109)
>>>> 		 at
>>>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
>>>> 		 at
>>>> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
>>>> 		 at
>>>> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process
>>>> (Http11Protocol.java:598)
>>>> 		 at org.apache.tomcat.util.net.JIoEndpoint$Worker.run
>>>> (JIoEndpoint.java:447)
>>>> 		 at java.lang.Thread.run(Thread.java:679)
>>>> Caused by: java.lang.RuntimeException: java.lang.NullPointerException
>>>> 		 at org.ejbca.core.model.ca.caadmin.CA.getExtendedCAService
>>>> (CA.java:856)
>>>> 		 at org.ejbca.core.model.ca.caadmin.CA.extendedService
>>>> (CA.java:753)
>>>> 		 at
>>>> org.ejbca.core.ejb.ca.caadmin.CAAdminSessionBean.extendedService
>>>> (CAAdminSessionBean.java:2379)
>>>> 		 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>>> 		 at
>>>> sun.reflect.NativeMethodAccessorImpl.invoke
>>>> (NativeMethodAccessorImpl.java:57)
>>>> 		 at
>>>> sun.reflect.DelegatingMethodAccessorImpl.invoke
>>>> (DelegatingMethodAccessorImpl.java:43)
>>>> 		 at java.lang.reflect.Method.invoke(Method.java:616)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeTarget
>>>> (MethodInvocation.java:122)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:111)
>>>> 		 at
>>>> org.jboss.ejb3.EJBContainerInvocationWrapper.invokeNext
>>>> (EJBContainerInvocationWrapper.java:69)
>>>> 		 at
>>>> org.jboss.ejb3.interceptors.aop.InterceptorSequencer.invoke
>>>> (InterceptorSequencer.java:73)
>>>> 		 at
>>>> org.jboss.ejb3.interceptors.aop.InterceptorSequencer.aroundInvoke
>>>> (InterceptorSequencer.java:59)
>>>> 		 at sun.reflect.GeneratedMethodAccessor421.invoke(Unknown
>>>> Source)
>>>> 		 at
>>>> sun.reflect.DelegatingMethodAccessorImpl.invoke
>>>> (DelegatingMethodAccessorImpl.java:43)
>>>> 		 at java.lang.reflect.Method.invoke(Method.java:616)
>>>> 		 at
>>>> org.jboss.aop.advice.PerJoinpointAdvice.invoke(PerJoinpointAdvice.java:174)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor.fillMethod
>>>> (InvocationContextInterceptor.java:72)
>>>> 		 at
>>>> org.jboss.aop.advice.org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor_z_fillMethod_1089614993.invoke
>>>> (InvocationContextInterceptor_z_fillMethod_1089614993.java)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor.setup
>>>> (InvocationContextInterceptor.java:88)
>>>> 		 at
>>>> org.jboss.aop.advice.org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor_z_setup_1089614993.invoke
>>>> (InvocationContextInterceptor_z_setup_1089614993.java)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.connectionmanager.CachedConnectionInterceptor.invoke
>>>> (CachedConnectionInterceptor.java:62)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.entity.TransactionScopedEntityManagerInterceptor.invoke
>>>> (TransactionScopedEntityManagerInterceptor.java:56)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.AllowedOperationsInterceptor.invoke
>>>> (AllowedOperationsInterceptor.java:47)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at org.jboss.ejb3.tx.NullInterceptor.invoke
>>>> (NullInterceptor.java:42)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at
>>>> org.jboss.ejb3.stateless.StatelessInstanceInterceptor.invoke
>>>> (StatelessInstanceInterceptor.java:68)
>>>> 		 at
>>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>>> (MethodInvocation.java:102)
>>>> 		 at org.jboss.aspects.tx.TxPolicy.invokeInOurTx
>>>> (TxPolicy.java:79)
>>>> 		 ... 48 more
>>>> Caused by: java.lang.NullPointerException
>>>> 		 at org.ejbca.core.model.ca.caadmin.CA.getExtendedCAService
>>>> (CA.java:833)
>>>> 		 ... 81 more
>>>> 2013-01-02 10:59:23,693 DEBUG
>>>> [org.ejbca.core.protocol.ocsp.TransactionLogger] (http-0.0.0.0-8080-1)
>>>> e06da8407f000101438312ce13be698a;2;0;0"10.163.14.49";"0";"0";0;"2013-01-02:05:29:23:GMT";94;1;0;0;0;0;0;0;0;"C=IN,O=National
>>>>
>>>> Informatics Centre,OU=Sub-CA,CN=NIC sub-CA for NIC
>>>> 2011";0c7558aee8c0ae3da9d64337ffb572a33f8b9f8a;fa800f1cfc73a4c7699013aeef3c10adaaaf1984;1.3.14.3.2.26;1101cda5343cbf30436b;0
>>>>
>>>> e06da8407f000101438312ce13be698a;2;2;0"10.163.14.49";"0";"0";0;"2013-01-02:05:29:23:GMT";94;1;0;0;0;0;0;0;0;"C=IN,O=National
>>>>
>>>> Informatics Centre,OU=Sub-CA,CN=NIC sub-CA for NIC
>>>> 2011";0c7558aee8c0ae3da9d64337ffb572a33f8b9f8a;fa800f1cfc73a4c7699013aeef3c10adaaaf1984;1.3.14.3.2.26;1101cda5343cbf30436b;0
>>>>
>>>>
>>>>
>>>> Is there any solution for above problem,
>>>>
>>>> Thanks in Advance
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> View this message in context:
>>>> http://old.nabble.com/External-OCSP-server-responder-problem-tp34850381p34850381.html
>>>>
>>>> Sent from the EjbCA - Dev mailing list archive at Nabble.com.
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>>
>>>> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
>>>> much more. Get web development skills now with LearnDevNow -
>>>> 350+ hours of step-by-step video tutorials by Microsoft MVPs and
>>>> experts.
>>>> SALE $99.99 this month only -- learn more at:
>>>> http://p.sf.net/sfu/learnmore_122812
>>>> _______________________________________________
>>>> Ejbca-develop mailing list
>>>> Ejb...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
>>>> much more. Get web development skills now with LearnDevNow -
>>>> 350+ hours of step-by-step video tutorials by Microsoft MVPs and
>>>> experts.
>>>> SALE $99.99 this month only -- learn more at:
>>>> http://p.sf.net/sfu/learnmore_122812
>>>> _______________________________________________
>>>> Ejbca-develop mailing list
>>>> Ejb...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>>
>>>>
>>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
>>> much more. Get web development skills now with LearnDevNow -
>>> 350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
>>> SALE $99.99 this month only -- learn more at:
>>> http://p.sf.net/sfu/learnmore_122812
>>> _______________________________________________
>>> Ejbca-develop mailing list
>>> Ejb...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>>
>>
>>
> 

Re: [Ejbca-develop] Antwort: External OCSP server responder problem

[Dhaks <g....@ni...>]

Actually CA generated by using my own not in using EJBCA
if i want to get ocsp response with my certificate which is generated by
me,so how to get response some other extra attribute , how to do it.....
please help me
thanks in advance
Regards
G.Lenin

Dhaks wrote:
> 
> External CA Meaning in the sense, CA issued by us not in by EJBCA,
> with my own CA how to get  response from the EJBCA....
> 
> 
> Tomas Gustavsson wrote:
>> 
>> 
>> What do you mean by "External CA"?
>> 
>> How did you create this "External CA" in the first place?
>> 
>> /Tomas
>> 
>> 
>> **********
>> PrimeKey Solutions AB
>> Anderstorpsvägen 16, 171 54 Solna, Sweden
>> Mob: +46 (0)707421096
>> Internet: www.primekey.se
>> Twitter: twitter.com/primekeyPKI
>> **********
>> 
>> On 01/04/2013 11:11 AM, Dhaks wrote:
>>>
>>> when activating CA via CA activate  the following message giving
>>>
>>>
>>>   Message: NICCA2011: 	CA Activation Successful.
>>> 	Message: CCAIndia2011: 	CA Activation Successful.
>>> 	Message: NICsub-CA_for_NIC_2011: 	CA Activation Successful.
>>>
>>>
>>> But it is not activating the CA
>>> we are struggling for this past one month.
>>> i hope u will give right solution to solve it
>>>
>>> Hi,
>>>
>>> have you activated the CA via "CA Activation"?
>>>
>>> Patrick
>>>
>>>
>>> http://www.kaufland.de
>>> http://www.spannende-it.de
>>>
>>> Wir bleiben die Nr. 1:
>>> Kaufland ist "Bester Lebensmittelmarkt 2012"!
>>>
>>> Kaufland Informationssysteme GmbH & Co. KG
>>> Postfach 12 53 - 74149 Neckarsulm
>>> Kommanditgesellschaft
>>> Sitz: Neckarsulm
>>> Registergericht: Stuttgart HRA 104163
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> Von:	Dhaks <g....@ni...>
>>> An:	ejb...@li...
>>> Datum:	04.01.2013 05:08
>>> Betreff:	[Ejbca-develop]  External OCSP server responder problem
>>>
>>>
>>>
>>>
>>> When we are trying to get response status for CA which is issued by
>>> EJBCA
>>> ,it's working fine from the OCSP Client(Using openSSL command), But
>>> trying
>>> with External CA which is already imported into ejbca database ,it's
>>> throwing NULL Pointer exception in server side log where as  client side
>>> getting the below error
>>>
>>> "ERROR QUERYING OCSP RESPONDER"
>>> and EJBCA AdminGUI the CA shows "CA not active"
>>>
>>> Server Side Error is in blow
>>>
>>>
>>>
>>> Error processing OCSP request. Message: java.lang.RuntimeException:
>>> java.lang.NullPointerException.
>>> javax.ejb.EJBException: java.lang.RuntimeException:
>>> java.lang.NullPointerException
>>> 		 at
>>> org.jboss.ejb3.tx.Ejb3TxPolicy.handleExceptionInOurTx(Ejb3TxPolicy.java:77)
>>> 		 at org.jboss.aspects.tx.TxPolicy.invokeInOurTx
>>> (TxPolicy.java:83)
>>> 		 at
>>> org.jboss.aspects.tx.TxInterceptor$Required.invoke(TxInterceptor.java:190)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.aspects.tx.TxPropagationInterceptor.invoke
>>> (TxPropagationInterceptor.java:76)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at org.jboss.ejb3.tx.NullInterceptor.invoke
>>> (NullInterceptor.java:42)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.security.RoleBasedAuthorizationInterceptorv2.invoke
>>> (RoleBasedAuthorizationInterceptorv2.java:201)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.security.Ejb3AuthenticationInterceptorv2.invoke
>>> (Ejb3AuthenticationInterceptorv2.java:186)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.ENCPropagationInterceptor.invoke
>>> (ENCPropagationInterceptor.java:41)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.BlockContainerShutdownInterceptor.invoke
>>> (BlockContainerShutdownInterceptor.java:67)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.aspects.currentinvocation.CurrentInvocationInterceptor.invoke
>>> (CurrentInvocationInterceptor.java:67)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.session.SessionSpecContainer.invoke
>>> (SessionSpecContainer.java:176)
>>> 		 at
>>> org.jboss.ejb3.session.SessionSpecContainer.invoke
>>> (SessionSpecContainer.java:216)
>>> 		 at
>>> org.jboss.ejb3.proxy.impl.handler.session.SessionProxyInvocationHandlerBase.invoke
>>> (SessionProxyInvocationHandlerBase.java:207)
>>> 		 at
>>> org.jboss.ejb3.proxy.impl.handler.session.SessionProxyInvocationHandlerBase.invoke
>>> (SessionProxyInvocationHandlerBase.java:164)
>>> 		 at $Proxy492.extendedService(Unknown Source)
>>> 		 at
>>> org.ejbca.ui.web.protocol.OCSPServlet.extendedService(OCSPServlet.java:60)
>>> 		 at
>>> org.ejbca.ui.web.protocol.OCSPServletBase.signOCSPResponse
>>> (OCSPServletBase.java:223)
>>> 		 at
>>> org.ejbca.ui.web.protocol.OCSPServletBase.serviceOCSP
>>> (OCSPServletBase.java:905)
>>> 		 at
>>> org.ejbca.ui.web.protocol.OCSPServletBase.doPost(OCSPServletBase.java:375)
>>> 		 at javax.servlet.http.HttpServlet.service
>>> (HttpServlet.java:637)
>>> 		 at javax.servlet.http.HttpServlet.service
>>> (HttpServlet.java:717)
>>> 		 at
>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter
>>> (ApplicationFilterChain.java:290)
>>> 		 at
>>> org.apache.catalina.core.ApplicationFilterChain.doFilter
>>> (ApplicationFilterChain.java:206)
>>> 		 at
>>> org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter
>>> (ReplyHeaderFilter.java:96)
>>> 		 at
>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter
>>> (ApplicationFilterChain.java:235)
>>> 		 at
>>> org.apache.catalina.core.ApplicationFilterChain.doFilter
>>> (ApplicationFilterChain.java:206)
>>> 		 at
>>> org.apache.catalina.core.StandardWrapperValve.invoke
>>> (StandardWrapperValve.java:235)
>>> 		 at
>>> org.apache.catalina.core.StandardContextValve.invoke
>>> (StandardContextValve.java:191)
>>> 		 at
>>> org.jboss.web.tomcat.security.SecurityAssociationValve.invoke
>>> (SecurityAssociationValve.java:190)
>>> 		 at
>>> org.apache.catalina.authenticator.AuthenticatorBase.invoke
>>> (AuthenticatorBase.java:433)
>>> 		 at
>>> org.jboss.web.tomcat.security.JaccContextValve.invoke
>>> (JaccContextValve.java:92)
>>> 		 at
>>> org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process
>>> (SecurityContextEstablishmentValve.java:126)
>>> 		 at
>>> org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke
>>> (SecurityContextEstablishmentValve.java:70)
>>> 		 at
>>> org.apache.catalina.core.StandardHostValve.invoke
>>> (StandardHostValve.java:127)
>>> 		 at
>>> org.apache.catalina.valves.ErrorReportValve.invoke
>>> (ErrorReportValve.java:102)
>>> 		 at
>>> org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke
>>> (CachedConnectionValve.java:158)
>>> 		 at
>>> org.apache.catalina.core.StandardEngineValve.invoke
>>> (StandardEngineValve.java:109)
>>> 		 at
>>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
>>> 		 at
>>> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
>>> 		 at
>>> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process
>>> (Http11Protocol.java:598)
>>> 		 at org.apache.tomcat.util.net.JIoEndpoint$Worker.run
>>> (JIoEndpoint.java:447)
>>> 		 at java.lang.Thread.run(Thread.java:679)
>>> Caused by: java.lang.RuntimeException: java.lang.NullPointerException
>>> 		 at org.ejbca.core.model.ca.caadmin.CA.getExtendedCAService
>>> (CA.java:856)
>>> 		 at org.ejbca.core.model.ca.caadmin.CA.extendedService
>>> (CA.java:753)
>>> 		 at
>>> org.ejbca.core.ejb.ca.caadmin.CAAdminSessionBean.extendedService
>>> (CAAdminSessionBean.java:2379)
>>> 		 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>> 		 at
>>> sun.reflect.NativeMethodAccessorImpl.invoke
>>> (NativeMethodAccessorImpl.java:57)
>>> 		 at
>>> sun.reflect.DelegatingMethodAccessorImpl.invoke
>>> (DelegatingMethodAccessorImpl.java:43)
>>> 		 at java.lang.reflect.Method.invoke(Method.java:616)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeTarget
>>> (MethodInvocation.java:122)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:111)
>>> 		 at
>>> org.jboss.ejb3.EJBContainerInvocationWrapper.invokeNext
>>> (EJBContainerInvocationWrapper.java:69)
>>> 		 at
>>> org.jboss.ejb3.interceptors.aop.InterceptorSequencer.invoke
>>> (InterceptorSequencer.java:73)
>>> 		 at
>>> org.jboss.ejb3.interceptors.aop.InterceptorSequencer.aroundInvoke
>>> (InterceptorSequencer.java:59)
>>> 		 at sun.reflect.GeneratedMethodAccessor421.invoke(Unknown
>>> Source)
>>> 		 at
>>> sun.reflect.DelegatingMethodAccessorImpl.invoke
>>> (DelegatingMethodAccessorImpl.java:43)
>>> 		 at java.lang.reflect.Method.invoke(Method.java:616)
>>> 		 at
>>> org.jboss.aop.advice.PerJoinpointAdvice.invoke(PerJoinpointAdvice.java:174)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor.fillMethod
>>> (InvocationContextInterceptor.java:72)
>>> 		 at
>>> org.jboss.aop.advice.org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor_z_fillMethod_1089614993.invoke
>>> (InvocationContextInterceptor_z_fillMethod_1089614993.java)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor.setup
>>> (InvocationContextInterceptor.java:88)
>>> 		 at
>>> org.jboss.aop.advice.org.jboss.ejb3.interceptors.aop.InvocationContextInterceptor_z_setup_1089614993.invoke
>>> (InvocationContextInterceptor_z_setup_1089614993.java)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.connectionmanager.CachedConnectionInterceptor.invoke
>>> (CachedConnectionInterceptor.java:62)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.entity.TransactionScopedEntityManagerInterceptor.invoke
>>> (TransactionScopedEntityManagerInterceptor.java:56)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.AllowedOperationsInterceptor.invoke
>>> (AllowedOperationsInterceptor.java:47)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at org.jboss.ejb3.tx.NullInterceptor.invoke
>>> (NullInterceptor.java:42)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at
>>> org.jboss.ejb3.stateless.StatelessInstanceInterceptor.invoke
>>> (StatelessInstanceInterceptor.java:68)
>>> 		 at
>>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext
>>> (MethodInvocation.java:102)
>>> 		 at org.jboss.aspects.tx.TxPolicy.invokeInOurTx
>>> (TxPolicy.java:79)
>>> 		 ... 48 more
>>> Caused by: java.lang.NullPointerException
>>> 		 at org.ejbca.core.model.ca.caadmin.CA.getExtendedCAService
>>> (CA.java:833)
>>> 		 ... 81 more
>>> 2013-01-02 10:59:23,693 DEBUG
>>> [org.ejbca.core.protocol.ocsp.TransactionLogger] (http-0.0.0.0-8080-1)
>>> e06da8407f000101438312ce13be698a;2;0;0"10.163.14.49";"0";"0";0;"2013-01-02:05:29:23:GMT";94;1;0;0;0;0;0;0;0;"C=IN,O=National
>>>
>>> Informatics Centre,OU=Sub-CA,CN=NIC sub-CA for NIC
>>> 2011";0c7558aee8c0ae3da9d64337ffb572a33f8b9f8a;fa800f1cfc73a4c7699013aeef3c10adaaaf1984;1.3.14.3.2.26;1101cda5343cbf30436b;0
>>>
>>> e06da8407f000101438312ce13be698a;2;2;0"10.163.14.49";"0";"0";0;"2013-01-02:05:29:23:GMT";94;1;0;0;0;0;0;0;0;"C=IN,O=National
>>>
>>> Informatics Centre,OU=Sub-CA,CN=NIC sub-CA for NIC
>>> 2011";0c7558aee8c0ae3da9d64337ffb572a33f8b9f8a;fa800f1cfc73a4c7699013aeef3c10adaaaf1984;1.3.14.3.2.26;1101cda5343cbf30436b;0
>>>
>>>
>>>
>>> Is there any solution for above problem,
>>>
>>> Thanks in Advance
>>>
>>>
>>>
>>>
>>>
>>> --
>>> View this message in context:
>>> http://old.nabble.com/External-OCSP-server-responder-problem-tp34850381p34850381.html
>>>
>>> Sent from the EjbCA - Dev mailing list archive at Nabble.com.
>>>
>>>
>>> ------------------------------------------------------------------------------
>>>
>>> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
>>> much more. Get web development skills now with LearnDevNow -
>>> 350+ hours of step-by-step video tutorials by Microsoft MVPs and
>>> experts.
>>> SALE $99.99 this month only -- learn more at:
>>> http://p.sf.net/sfu/learnmore_122812
>>> _______________________________________________
>>> Ejbca-develop mailing list
>>> Ejb...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
>>> much more. Get web development skills now with LearnDevNow -
>>> 350+ hours of step-by-step video tutorials by Microsoft MVPs and
>>> experts.
>>> SALE $99.99 this month only -- learn more at:
>>> http://p.sf.net/sfu/learnmore_122812
>>> _______________________________________________
>>> Ejbca-develop mailing list
>>> Ejb...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>>
>>>
>> 
>> ------------------------------------------------------------------------------
>> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
>> much more. Get web development skills now with LearnDevNow -
>> 350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
>> SALE $99.99 this month only -- learn more at:
>> http://p.sf.net/sfu/learnmore_122812
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/External-OCSP-server-responder-problem-tp34850381p35068347.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.

Re: [Ejbca-develop] externalra_gui/ error

[ejbca-support <ejb...@pr...>]

On 2013-02-26 13:26, ha...@nc... wrote:
> Dear sir
> 
> I have setup an externalRA server with the GUI ,
> the GUI doesn't use HTTPS, just normal HTTP.
> And also setup the RA Service worker at the CA Side. But I encountered the
> following issue:
> When I open the RA-Gui page and select Create Browser Certificate, and
> input a user-name and password, it waits for the RA wait time and then
> responds saying "CA did not respond"
> the logs in the CA Server say the following
> java.net.ConnectException: Connection refused
> -ERROR [SchemaUpdate] could not get database metadata
> javax.resource.ResourceException: Unable to get managed connection for
> RAMessage1DS
>  com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications
> link failure
> - ERROR [MessageProcessor] Misconfigured CA Name in RAService
> 
> 
>   your help will be very much appreciated.

Without the entire stack-trace it is difficult to know but a
hot tip is that there is connection issue between the machines.
This can be verified by logging in using "mysql" from the CA
to extRA box.

Cheers
Anders
tech support

> 
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 

[Ejbca-develop] externalra_gui/ error

[<ha...@nc...>]

Dear sir

I have setup an externalRA server with the GUI ,
the GUI doesn't use HTTPS, just normal HTTP.
And also setup the RA Service worker at the CA Side. But I encountered the
following issue:
When I open the RA-Gui page and select Create Browser Certificate, and
input a user-name and password, it waits for the RA wait time and then
responds saying "CA did not respond"
the logs in the CA Server say the following
java.net.ConnectException: Connection refused
-ERROR [SchemaUpdate] could not get database metadata
javax.resource.ResourceException: Unable to get managed connection for
RAMessage1DS
 com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications
link failure
- ERROR [MessageProcessor] Misconfigured CA Name in RAService


  your help will be very much appreciated.

Re: [Ejbca-develop] add new attribute and class for OCSP responder

[ejbca-support <ejb...@pr...>]

On 2013-02-26 06:19, Dhaks wrote:
> 
> Hi,
> I have installed OCSP responder from ejbCA using blow
> 1.ant bootstarp
> 2.ant install
> 3.ant va-deploy
> 
> the above are working fine and getting good response with external CA.
> my Question is how to add custom attribute in certificate data table and
> class to verify external field ...

Maybe this can help:

http://www.ejbca.org/userguide-ocsp.html#OCSP extensions

Cheers
Anders
tech support

> 
> 
> Regards
> G.Lenin
> 

[Ejbca-develop] add custom attribute in database of certificate table and class for OCSP responder

[Dhaks <g....@ni...>]

I have installed OCSP responder from ejbCA using blow
1.ant bootstarp
2.ant install
3.ant va-deploy

the above are working fine and getting good response with external CA.
my Question is how to add custom attribute in certificate data table and
class to verify external field ...


Regards
G.Lenin
-- 
View this message in context: http://old.nabble.com/add-custom-attribute-in-database-of-certificate-table-and-class-for-OCSP-responder-tp35065124p35065124.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.

[Ejbca-develop] add custom attribute in database of certificate table and class for OCSP responder

[Dhaks <g....@ni...>]

I have installed OCSP responder from ejbCA using blow
1.ant bootstarp
2.ant install
3.ant va-deploy

the above are working fine and getting good response with external CA.
my Question is how to add custom attribute in certificate data table and
class to verify external field ...


Regards
G.Lenin
-- 
View this message in context: http://old.nabble.com/add-custom-attribute-in-database-of-certificate-table-and-class-for-OCSP-responder-tp35065126p35065126.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.

[Ejbca-develop] add new attribute and class for OCSP responder

[Dhaks <g....@ni...>]

Hi,
I have installed OCSP responder from ejbCA using blow
1.ant bootstarp
2.ant install
3.ant va-deploy

the above are working fine and getting good response with external CA.
my Question is how to add custom attribute in certificate data table and
class to verify external field ...


Regards
G.Lenin
-- 
View this message in context: http://old.nabble.com/add-new-attribute-and-class-for-OCSP-responder-tp35065118p35065118.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.

[Ejbca-develop] add new attribute and class for OCSP responder

[Dhaks <g....@ni...>]

Hi,
I have installed OCSP responder from ejbCA using blow
1.ant bootstarp
2.ant install
3.ant va-deploy

the above are working fine and getting good response with external CA.
my Question is how to add custom attribute in certificate data table and
class to verify external field ...


Regards
G.Lenin
-- 
View this message in context: http://old.nabble.com/add-new-attribute-and-class-for-OCSP-responder-tp35065116p35065116.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.

[Ejbca-develop] Bad keystore password?

[Carter M. <Car...@fm...>]

I'm trying to use the LiveCD version to get ejbca working.  I've tried standing it up using Ubuntu, but it looks like the newer java is messing with it.  CentOS install got me further, but I ended up with another issue I can't recall.

With the LiveCD version, I setup all of my new CA's, sub-CA's, persons and Administrator groups.  I've exported my new keystore, and this is where I hit the wall - every time I try and restart the server after putting in the new keystore, it bombs:

DEPLOYMENTS IN ERROR:
  Deployment "WebServer" is in error due to the following reason(s): LifecycleException:  Protocol handler initialization failed: java.io.IOException: Keystore was tampered with, or password was incorrect
  Deployment "jboss.web:service=WebServer" is in error due to the following reason(s): ** NOT FOUND Depends on 'jboss.web:service=WebServer' **


I know this is due to a bad password, but I thought I changed all the right things.  Yes, I did change the default from 'changeit'.  I've updated my web.properties file, and I've run the 'ant javatruststore' and 'ant -Dca.name=FooCA javatruststore' (with my ca name of course).  These commands seem to run ok, but I get no love on the server startup.

Is there something else I'm missing here?  Any help is appreciated!

Regards,
Carter

Re: [Ejbca-develop] Super Administrator certificate expired

[Marco P. <mar...@un...>]

Hi Tomas,

I've issue:

ejbca@ca:/opt/ejbca$ bin/ejbca.sh admins listadmins "Super Administrators"
"UniBocconi Person CA" WITHSERIALNUMBER EQUALCASE "45DD9929D269FC85"

where serial number is the number that i modified by changing the mysql value.

I've simply restarted ejbca and i can access admin pages.

Thanks!
Marco


----- Messaggio originale -----
> 
> You should check out the "bin/ejbca.sh admins" CLI command. It gives
> you
> good access to administrator configuration.
> 
> Cheers,
> Tomas
> 
> ** VISIT US AT RSA EXPO - BOOTH #459 **
> **** FREE EXPO PASS CODE: FXE13PKS ****
> https://ae.rsaconference.com/US13/portal/login.ww
> 
> **********
> PrimeKey Solutions AB
> Anderstorpsvägen 16, 171 54 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
> 
> On 02/20/2013 04:20 PM, Marco Pirovano wrote:
> > Hello,
> >
> > as writed in the Subject my Super Administrator certificate is
> > expired....
> >
> > I generated a new administrator.p12 certificate and imported it in
> > my
> > Firefox, but I'm not able to access Administration page:
> >
> >
> >     Authorization Denied
> >
> >
> >         Cause : You are not authorized to view this page.
> >
> > I think the problem is the certificate serial number that is
> > different.
> > Is it right ?
> >
> > How can i change this value to set the new one ?
> >
> > I've tried with:
> >
> > mysql> select * from AdminEntityData;
> > +------------+----------+------------+------------------+-----------+---------------+------------+------------------------------+
> > | pK             | cAId        | matchType | matchValue       |
> > matchWith | rowProtection | rowVersion |
> > AdminGroupData_adminEntities |
> > +------------+----------+------------+------------------+-----------+---------------+------------+------------------------------+
> > |  329358383 |        0 |      2003 | UNUSED           |        11
> > |  |
> > NULL          |          0 |                    699462851 |
> > |  329358381 |        0 |      2001 | UNUSED           |        11
> > |  |
> > NULL          |          0 |                    699462851 |
> > |  329358382 |        0 |      2002 | UNUSED           |        11
> > |  |
> > NULL          |          0 |                    699462851 |
> > |  329358376 |        0 |      2004 | UNUSED           |        11
> > |  |
> > NULL          |          0 |                    699462851 |
> > | 1346258728 |        0 |      2000 | UNUSED           |        11
> > | |
> > NULL          |          0 |                   1992513559 |
> > | 1638101299 | 10711734 |      1000 | 0DD01925A61C6AB2 |        11
> > | |
> > NULL          |          0 |                   1666727782 |
> > +------------+----------+-----------+------------------+-----------+---------------+------------+------------------------------+
> >
> > and changed the last line with the new value:
> >
> > UPDATE AdminEntityData SET matchValue='45DD9929D269FC85' WHERE
> > pK=1638101299;
> >
> > but nothing.
> >
> > Please help.
> >
> > Thank you very much.
> >
> > Marco
> > --
> > Marco Pirovano
> > Infrastrutture e Tecnologie
> > Area Sistemi Informatici e Telematici
> > Universita' Bocconi
> > via Gobbi, 5 - 20136 Milano
> > Tel. +39 02 5836.3173  Fax. +39 02 5836.3160
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Everyone hates slow websites. So do we.
> > Make your web apps faster with AppDynamics
> > Download AppDynamics Lite for free today:
> > http://p.sf.net/sfu/appdyn_d2d_feb
> >
> >
> >
> > _______________________________________________
> > Ejbca-develop mailing list
> > Ejb...@li...
> > https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> >
> 
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 

-- 
Marco Pirovano
Infrastrutture e Tecnologie
Area Sistemi Informatici e Telematici
Universita' Bocconi
via Gobbi, 5 - 20136 Milano
Tel. +39 02 5836.3173  Fax. +39 02 5836.3160

Re: [Ejbca-develop] External OCSP Responder issue

[Tomas G. <to...@pr...>]

You have probably inserted the certificates wrongly in the database. 
There is no signing certificate and key picked up for that CA.

A debug log, during startup, will tell you very much what the responder 
is picking up.

The VA publisher is working if you configure it correctly. You need to 
add it as a "CRL Publisher" in "Edit Certificate Authorities", I think 
this is what it says in the installation guide.
Also the certificate profile used to issue the responder certificate 
needs a VA publisher (the same) configured in "Edit Certificate Profiles".

Cheers,
Tomas


** VISIT US AT RSA EXPO - BOOTH #459 **
**** FREE EXPO PASS CODE: FXE13PKS ****
https://ae.rsaconference.com/US13/portal/login.ww

**********
PrimeKey Solutions AB
Anderstorpsvägen 16, 171 54 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 02/20/2013 07:43 AM, M.G.R wrote:
>
> I have setup the External OCSP Responder by using the OCSP Installation
> guide. but while publish using the Publisher Type -> Validation Authority
> Publisher with ocsp database is not updating. So I have manually inserted
> the CA certificate and user certificate issued by that CA.
> Then, I have requested for the OCSP Response using openssl ocsp client. It
> shows the following error.
>
> Please give any soln for this issue.
>
> Input Error:
>
> $ openssl ocsp -issuer AdminCA1.pem -cert ramesh.pem -url
> http://10.163.14.120:8080/ejbca/publicweb/status/ocsp -respout resp.der
> -no_cert_verify
> Error querying OCSP responsder
>
> Output Error:
>
> 2013-02-20 10:30:13,674 INFO
> [org.ejbca.core.protocol.ocsp.standalonesession.SigningEntityContainer]
> (http-0.0.0.0-8080-1) No card password specified.
> 2013-02-20 10:30:14,175 WARN
> [org.ejbca.core.protocol.ocsp.standalonesession.SigningEntityContainer]
> (http-0.0.0.0-8080-1) You have not specified ocsp.p11.p11password at build
> time. So you need to do a manual activation.
> 2013-02-20 10:30:14,175 ERROR
> [org.ejbca.core.protocol.ocsp.standalonesession.SigningEntityContainer]
> (http-0.0.0.0-8080-1) No valid keys. Key directory
> /home/otc/ejbca/jboss-5.1.0.GA/bin/keys. No P11 defined.
> 2013-02-20 10:30:14,175 INFO  [org.ejbca.ui.web.protocol.OCSPServletBase]
> (http-0.0.0.0-8080-1) Received OCSP request for certificate with serNo:
> 33f74ee237b19e46, and issuerNameHash:
> 4145f8a5ccf07e01ebf1d22d40a1e29392b1e02e. Client ip 10.163.14.120.
> 2013-02-20 10:30:14,186 INFO  [org.ejbca.ui.web.protocol.OCSPServletBase]
> (http-0.0.0.0-8080-1) Adding status information (good) for certificate with
> serial '33f74ee237b19e46' from issuer 'CN=AdminCA1,O=EJBCA Sample,C=SE'.
> 2013-02-20 10:30:24,188 ERROR [org.ejbca.ui.web.protocol.OCSPServletBase]
> (http-0.0.0.0-8080-1) Error processing OCSP request. Message: No ocsp
> signing key for caid -1688117755.
> org.ejbca.core.model.ca.caadmin.extendedcaservices.ExtendedCAServiceNotActiveException:
> No ocsp signing key for caid -1688117755
> 	at
> org.ejbca.core.protocol.ocsp.standalonesession.StandAloneSession.extendedService(StandAloneSession.java:390)
> 	at
> org.ejbca.ui.web.protocol.OCSPServletStandAlone.extendedService(OCSPServletStandAlone.java:131)
> 	at
> org.ejbca.ui.web.protocol.OCSPServletBase.signOCSPResponse(OCSPServletBase.java:228)
> 	at
> org.ejbca.ui.web.protocol.OCSPServletBase.serviceOCSP(OCSPServletBase.java:934)
> 	at
> org.ejbca.ui.web.protocol.OCSPServletBase.doPost(OCSPServletBase.java:380)
> 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
> 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
> 	at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> 	at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> 	at
> org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
> 	at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> 	at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> 	at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:235)
> 	at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
> 	at
> org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:190)
> 	at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
> 	at
> org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
> 	at
> org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
> 	at
> org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
> 	at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
> 	at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> 	at
> org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
> 	at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> 	at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
> 	at
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
> 	at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
> 	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> 	at java.lang.Thread.run(Thread.java:679)
>

Re: [Ejbca-develop] Super Administrator certificate expired

[Tomas G. <to...@pr...>]

You should check out the "bin/ejbca.sh admins" CLI command. It gives you 
good access to administrator configuration.

Cheers,
Tomas

** VISIT US AT RSA EXPO - BOOTH #459 **
**** FREE EXPO PASS CODE: FXE13PKS ****
https://ae.rsaconference.com/US13/portal/login.ww

**********
PrimeKey Solutions AB
Anderstorpsvägen 16, 171 54 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 02/20/2013 04:20 PM, Marco Pirovano wrote:
> Hello,
>
> as writed in the Subject my Super Administrator certificate is expired....
>
> I generated a new administrator.p12 certificate and imported it in my
> Firefox, but I'm not able to access Administration page:
>
>
>     Authorization Denied
>
>
>         Cause : You are not authorized to view this page.
>
> I think the problem is the certificate serial number that is different.
> Is it right ?
>
> How can i change this value to set the new one ?
>
> I've tried with:
>
> mysql> select * from AdminEntityData;
> +------------+----------+------------+------------------+-----------+---------------+------------+------------------------------+
> | pK             | cAId        | matchType | matchValue       |
> matchWith | rowProtection | rowVersion | AdminGroupData_adminEntities |
> +------------+----------+------------+------------------+-----------+---------------+------------+------------------------------+
> |  329358383 |        0 |      2003 | UNUSED           |        11 |
> NULL          |          0 |                    699462851 |
> |  329358381 |        0 |      2001 | UNUSED           |        11 |
> NULL          |          0 |                    699462851 |
> |  329358382 |        0 |      2002 | UNUSED           |        11 |
> NULL          |          0 |                    699462851 |
> |  329358376 |        0 |      2004 | UNUSED           |        11 |
> NULL          |          0 |                    699462851 |
> | 1346258728 |        0 |      2000 | UNUSED           |        11 |
> NULL          |          0 |                   1992513559 |
> | 1638101299 | 10711734 |      1000 | 0DD01925A61C6AB2 |        11 |
> NULL          |          0 |                   1666727782 |
> +------------+----------+-----------+------------------+-----------+---------------+------------+------------------------------+
>
> and changed the last line with the new value:
>
> UPDATE AdminEntityData SET matchValue='45DD9929D269FC85' WHERE
> pK=1638101299;
>
> but nothing.
>
> Please help.
>
> Thank you very much.
>
> Marco
> --
> Marco Pirovano
> Infrastrutture e Tecnologie
> Area Sistemi Informatici e Telematici
> Universita' Bocconi
> via Gobbi, 5 - 20136 Milano
> Tel. +39 02 5836.3173  Fax. +39 02 5836.3160
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

[Ejbca-develop] Super Administrator certificate expired

[Marco P. <mar...@un...>]

Hello, 

as writed in the Subject my Super Administrator certificate is expired. ... 

I generated a new administrator.p12 certificate and imported it in my Firefox, but I'm not able to access Administration page: 
Authorization Denied 
Cause : You are not authorized to view this page. 
I think the problem is the certificate serial number that is different. Is it right ? 

How can i change this value to set the new one ? 

I've tried with: 

mysql> select * from AdminEntityData; 
+------------+----------+------------+------------------+-----------+---------------+------------+------------------------------+ 
| pK | cAId | matchType | matchValue | matchWith | rowProtection | rowVersion | AdminGroupData_adminEntities | 
+------------+----------+------------+------------------+-----------+---------------+------------+------------------------------+ 
| 329358383 | 0 | 2003 | UNUSED | 11 | NULL | 0 | 699462851 | 
| 329358381 | 0 | 2001 | UNUSED | 11 | NULL | 0 | 699462851 | 
| 329358382 | 0 | 2002 | UNUSED | 11 | NULL | 0 | 699462851 | 
| 329358376 | 0 | 2004 | UNUSED | 11 | NULL | 0 | 699462851 | 
| 1346258728 | 0 | 2000 | UNUSED | 11 | NULL | 0 | 1992513559 | 
| 1638101299 | 10711734 | 1000 | 0DD01925A61C6AB2 | 11 | NULL | 0 | 1666727782 | 
+------------+----------+-----------+------------------+-----------+---------------+------------+------------------------------+ 

and changed the last line with the new value: 

UPDATE AdminEntityData SET matchValue='45DD9929D269FC85' WHERE pK=1638101299; 

but nothing. 

Please help. 

Thank you very much. 

Marco 
-- 
Marco Pirovano 
Infrastrutture e Tecnologie 
Area Sistemi Informatici e Telematici 
Universita' Bocconi 
via Gobbi, 5 - 20136 Milano 
Tel. +39 02 5836.3173 Fax. +39 02 5836.3160 

[Ejbca-develop] External OCSP Responder issue

[M.G.R <mg....@ni...>]

I have setup the External OCSP Responder by using the OCSP Installation
guide. but while publish using the Publisher Type -> Validation Authority
Publisher with ocsp database is not updating. So I have manually inserted
the CA certificate and user certificate issued by that CA.
Then, I have requested for the OCSP Response using openssl ocsp client. It
shows the following error.

Please give any soln for this issue.

Input Error:

$ openssl ocsp -issuer AdminCA1.pem -cert ramesh.pem -url
http://10.163.14.120:8080/ejbca/publicweb/status/ocsp -respout resp.der
-no_cert_verify
Error querying OCSP responsder

Output Error:

2013-02-20 10:30:13,674 INFO 
[org.ejbca.core.protocol.ocsp.standalonesession.SigningEntityContainer]
(http-0.0.0.0-8080-1) No card password specified.
2013-02-20 10:30:14,175 WARN 
[org.ejbca.core.protocol.ocsp.standalonesession.SigningEntityContainer]
(http-0.0.0.0-8080-1) You have not specified ocsp.p11.p11password at build
time. So you need to do a manual activation.
2013-02-20 10:30:14,175 ERROR
[org.ejbca.core.protocol.ocsp.standalonesession.SigningEntityContainer]
(http-0.0.0.0-8080-1) No valid keys. Key directory
/home/otc/ejbca/jboss-5.1.0.GA/bin/keys. No P11 defined.
2013-02-20 10:30:14,175 INFO  [org.ejbca.ui.web.protocol.OCSPServletBase]
(http-0.0.0.0-8080-1) Received OCSP request for certificate with serNo:
33f74ee237b19e46, and issuerNameHash:
4145f8a5ccf07e01ebf1d22d40a1e29392b1e02e. Client ip 10.163.14.120.
2013-02-20 10:30:14,186 INFO  [org.ejbca.ui.web.protocol.OCSPServletBase]
(http-0.0.0.0-8080-1) Adding status information (good) for certificate with
serial '33f74ee237b19e46' from issuer 'CN=AdminCA1,O=EJBCA Sample,C=SE'.
2013-02-20 10:30:24,188 ERROR [org.ejbca.ui.web.protocol.OCSPServletBase]
(http-0.0.0.0-8080-1) Error processing OCSP request. Message: No ocsp
signing key for caid -1688117755.
org.ejbca.core.model.ca.caadmin.extendedcaservices.ExtendedCAServiceNotActiveException:
No ocsp signing key for caid -1688117755
	at
org.ejbca.core.protocol.ocsp.standalonesession.StandAloneSession.extendedService(StandAloneSession.java:390)
	at
org.ejbca.ui.web.protocol.OCSPServletStandAlone.extendedService(OCSPServletStandAlone.java:131)
	at
org.ejbca.ui.web.protocol.OCSPServletBase.signOCSPResponse(OCSPServletBase.java:228)
	at
org.ejbca.ui.web.protocol.OCSPServletBase.serviceOCSP(OCSPServletBase.java:934)
	at
org.ejbca.ui.web.protocol.OCSPServletBase.doPost(OCSPServletBase.java:380)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:235)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
	at
org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:190)
	at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
	at
org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
	at
org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
	at
org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
	at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
	at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at
org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
	at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
	at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
	at java.lang.Thread.run(Thread.java:679)

-- 
View this message in context: http://old.nabble.com/External-OCSP-Responder-issue-tp35044907p35044907.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.