From: Anais <lap...@ho...> - 2008-07-16 13:22:28
|
Hi, I have created a new user "admin" and his certificate and put it in a new keystore and that work ! But i have made an error because i have errase my superadmin from the administrator group and now i can't viex the GUI because the certificate who is in my browser don't have any user. So how can i extract the admin's certificate with his private key as a p12 file in order to add it in my browser ? Or how can i add my new user "admin" to the administrator's group by using cli ? Thanks and sorry to ask so many questions ! Tham Wickenberg wrote: > > Hi Anais, > > What is the CN-field of your tomcat.jks / tomcat-user? > Is password you used to create the superadmin.jks "foo123"? > Do you still have the exact same error? > > /Johan > > Anais skrev: >> the properties >> http://www.nabble.com/file/p18458612/ejbcawsracli.properties >> ejbcawsracli.properties >> >> Anais wrote: >> >>> Hi, >>> >>> I can reach the admin GUI, no problem. >>> I send you my properties in attachement. >>> Thanks for help ! >>> >>> >>> Tham Wickenberg wrote: >>> >>>> Hi again, >>>> >>>> two questions to help us help you, >>>> 1. Can you reach the admin GUI? >>>> 2. What does your dist/ejbcawscli/ejbcawsracli.properties look like? >>>> Perhaps you could send it to us as an attachment. >>>> >>>> Best regards, >>>> Tham Wickenberg >>>> >>>> Anais wrote: >>>> >>>>> I have given the full path but my error is still alive ! >>>>> Is it an other way ? >>>>> >>>>> >>>>> Tham Wickenberg wrote: >>>>> >>>>> >>>>>> Yes exactly. But you probably have to give the full path I don't >>>>>> think >>>>>> it supports environment variables ($EJBCA_HOME). >>>>>> >>>>>> /Tomas >>>>>> >>>>>> >>>>>> Anais wrote: >>>>>> >>>>>> >>>>>>> Hi Johan, >>>>>>> >>>>>>> In my properties file i must replace >>>>>>> ejbcawsracli.keystore.path=superadmin.jks >>>>>>> to >>>>>>> ejbcawsracli.keystore.path=$EJBCA_HOME/p12/superadmin.jks >>>>>>> isn't it ? >>>>>>> >>>>>>> >>>>>>> Tham Wickenberg wrote: >>>>>>> >>>>>>> >>>>>>>> Hi Anais, >>>>>>>> >>>>>>>> If you list the "superadmin" user in EJBCA's Admin GUI, edit it, >>>>>>>> set >>>>>>>> password to the same thing as in the properties file and token-type >>>>>>>> to >>>>>>>> JKS. >>>>>>>> Run "$EJBCA_HOME/bin/ejbca.sh batch" to generate >>>>>>>> $EJBCA_HOME/p12/superadmin.jks. >>>>>>>> Make sure this file is present in the path specified in the >>>>>>>> properties >>>>>>>> file. >>>>>>>> >>>>>>>> Best Regards, >>>>>>>> Johan Eklund >>>>>>>> >>>>>>>> Anais skrev: >>>>>>>> >>>>>>>> >>>>>>>>> Hi Tomas, >>>>>>>>> >>>>>>>>> My properties file references to superadmin.jks but i don't have >>>>>>>>> this >>>>>>>>> file. >>>>>>>>> So i have convert my superadmin.p12 to superadmin.jks by using >>>>>>>>> openSSl >>>>>>>>> but i >>>>>>>>> always have the same error. >>>>>>>>> >>>>>>>>> Thanks >>>>>>>>> >>>>>>>>> >>>>>>>>> Tham Wickenberg wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> Did you configure the properties file correctly to use a correct >>>>>>>>>> JKS >>>>>>>>>> keystore for an administrator? >>>>>>>>>> >>>>>>>>>> PS: the command should be something like: >>>>>>>>>> ./ejbcawsracli.sh finduser USERNAME EQUALS foo >>>>>>>>>> >>>>>>>>>> Cheers, >>>>>>>>>> Tomas >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> Anais wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Hi, >>>>>>>>>>> >>>>>>>>>>> I have resolved my problem with alternatives but now i have an >>>>>>>>>>> other >>>>>>>>>>> one >>>>>>>>>>> ! >>>>>>>>>>> When i run my ejcawsracli.sh i have : >>>>>>>>>>> ./ejbcawsracli.sh finduser USERNAME EQUALS >>>>>>>>>>> leclientjavax.xml.ws.WebServiceException: >>>>>>>>>>> java.net.SocketException: >>>>>>>>>>> Default >>>>>>>>>>> SSL context init failed: null >>>>>>>>>>> org.ejbca.ui.cli.ErrorAdminCommandException: >>>>>>>>>>> javax.xml.ws.WebServiceException: java.net.SocketException: >>>>>>>>>>> Default >>>>>>>>>>> SSL >>>>>>>>>>> context init failed: null >>>>>>>>>>> at >>>>>>>>>>> org.ejbca.core.protocol.ws.client.FindUserCommand.execute(Unknown >>>>>>>>>>> Source) >>>>>>>>>>> at >>>>>>>>>>> org.ejbca.core.protocol.ws.client.ejbcawsracli.main(Unknown >>>>>>>>>>> Source) >>>>>>>>>>> Caused by: javax.xml.ws.WebServiceException: >>>>>>>>>>> java.net.SocketException: >>>>>>>>>>> Default SSL context init failed: null >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:162) >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parseWSDL(RuntimeWSDLParser.java:188) >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parse(RuntimeWSDLParser.java:66) >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.wsdl.WSDLContext.<init>(WSDLContext.java:57) >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.client.ServiceContextBuilder.build(ServiceContextBuilder.java:60) >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:103) >>>>>>>>>>> at >>>>>>>>>>> com.sun.xml.ws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:50) >>>>>>>>>>> at javax.xml.ws.Service.<init>(Service.java:57) >>>>>>>>>>> at >>>>>>>>>>> org.ejbca.core.protocol.ws.client.gen.EjbcaWSService.<init>(Unknown >>>>>>>>>>> Source) >>>>>>>>>>> at >>>>>>>>>>> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(Unknown >>>>>>>>>>> Source) >>>>>>>>>>> at >>>>>>>>>>> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(Unknown >>>>>>>>>>> Source) >>>>>>>>>>> ... 2 more >>>>>>>>>>> >>>>>>>>>>> What's wrong with le ssl connexion ? >>>>>>>>>>> thank >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> Tomas Gustavsson wrote: >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> You need to put /usr/java/jdk1.5.0_11/bin in the path not just >>>>>>>>>>>> /usr/java/jdk1.5.0_11/. >>>>>>>>>>>> >>>>>>>>>>>> /Tomas >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Tham Wickenberg wrote: >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Dear Anais, >>>>>>>>>>>>> >>>>>>>>>>>>> I am certain that you are using gcj because the bugtrace says: >>>>>>>>>>>>> >>>>>>>>>>>>> Exception in thread "main" java.lang.NoClassDefFoundError: >>>>>>>>>>>>> ejbcawscli.jar >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>> at gnu.gcj.runtime.FirstThread.run() >>>>>>>>>>>>>>> (/usr/lib/libgcj.so.5.0.0) >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>> try: sudo update-alternatives --config java to change the >>>>>>>>>>>>> version >>>>>>>>>>>>> you >>>>>>>>>>>>> are >>>>>>>>>>>>> using. >>>>>>>>>>>>> >>>>>>>>>>>>> Best regards, >>>>>>>>>>>>> Tham >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> Anais wrote: >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>> >>>>>>>>>>>>>> i have downloaded and installed the rpm of jdk5 and my PATH >>>>>>>>>>>>>> is >>>>>>>>>>>>>> : >>>>>>>>>>>>>> /usr/java/jdk1.5.0_11/:/usr/java/jdk1.5.0_11/:/usr/java/jdk1.5.0_11/:/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/usr/j2ee/apache-ant-1.6.5/bin:/usr/j2ee/apache-ant-1.6.5/bin:/root/bin:/usr/j2ee/apache-ant-1.6.5/bin >>>>>>>>>>>>>> that is correct but that does'nt work so i don't understand. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>> >>>>>>>>>>>>>> Tomas Gustavsson wrote: >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> Anais, >>>>>>>>>>>>>>> you have wrongly configured you path and java. As you can >>>>>>>>>>>>>>> see >>>>>>>>>>>>>>> from >>>>>>>>>>>>>>> below >>>>>>>>>>>>>>> the java you try to use is GNU java. GNU java does not work. >>>>>>>>>>>>>>> Use >>>>>>>>>>>>>>> a >>>>>>>>>>>>>>> real >>>>>>>>>>>>>>> java. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>> Tomas >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Anais wrote: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> I would like te generate a server certificate by using cli. >>>>>>>>>>>>>>>> I >>>>>>>>>>>>>>>> use >>>>>>>>>>>>>>>> : >>>>>>>>>>>>>>>> ./ejbcawsracli.sh pkcs12req testuser foo123 2048 NONE tmp >>>>>>>>>>>>>>>> and i have the error : >>>>>>>>>>>>>>>> Warning: -jar not understood. Ignoring. >>>>>>>>>>>>>>>> Exception in thread "main" java.lang.NoClassDefFoundError: >>>>>>>>>>>>>>>> ejbcawscli.jar >>>>>>>>>>>>>>>> at gnu.gcj.runtime.FirstThread.run() >>>>>>>>>>>>>>>> (/usr/lib/libgcj.so.5.0.0) >>>>>>>>>>>>>>>> at _Jv_ThreadRun(java.lang.Thread) >>>>>>>>>>>>>>>> (/usr/lib/libgcj.so.5.0.0) >>>>>>>>>>>>>>>> at _Jv_RunMain(java.lang.Class, byte const, int, byte >>>>>>>>>>>>>>>> const, >>>>>>>>>>>>>>>> boolean) >>>>>>>>>>>>>>>> (/usr/lib/libgcj.so.5.0.0) >>>>>>>>>>>>>>>> at __gcj_personality_v0 >>>>>>>>>>>>>>>> (/usr/jboss-4.2.2.GA-src/j2ee/ejbca_3_5_4/dist/ejbcawscli/java.version=1.4.2) >>>>>>>>>>>>>>>> at __libc_start_main (/lib/tls/libc-2.3.4.so) >>>>>>>>>>>>>>>> at _Jv_RegisterClasses >>>>>>>>>>>>>>>> (/usr/jboss-4.2.2.GA-src/j2ee/ejbca_3_5_4/dist/ejbcawscli/java.version=1.4.2) >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Somebody could help me ? >>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> ------------------------------------------------------------------------- >>>>>>>>>>>>>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE >>>>>>>>>>>>>>> NOW! >>>>>>>>>>>>>>> Studies have shown that voting for your favorite open source >>>>>>>>>>>>>>> project, >>>>>>>>>>>>>>> along with a healthy diet, reduces your potential for >>>>>>>>>>>>>>> chronic >>>>>>>>>>>>>>> lameness >>>>>>>>>>>>>>> and boredom. Vote Now at >>>>>>>>>>>>>>> http://www.sourceforge.net/community/cca08 >>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>> Ejbca-develop mailing list >>>>>>>>>>>>>>> Ejb...@li... >>>>>>>>>>>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>> ------------------------------------------------------------------------- >>>>>>>>>>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE >>>>>>>>>>>> NOW! >>>>>>>>>>>> Studies have shown that voting for your favorite open source >>>>>>>>>>>> project, >>>>>>>>>>>> along with a healthy diet, reduces your potential for chronic >>>>>>>>>>>> lameness >>>>>>>>>>>> and boredom. Vote Now at >>>>>>>>>>>> http://www.sourceforge.net/community/cca08 >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> Ejbca-develop mailing list >>>>>>>>>>>> Ejb...@li... >>>>>>>>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>> ------------------------------------------------------------------------- >>>>>>>>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! >>>>>>>>>> Studies have shown that voting for your favorite open source >>>>>>>>>> project, >>>>>>>>>> along with a healthy diet, reduces your potential for chronic >>>>>>>>>> lameness >>>>>>>>>> and boredom. Vote Now at >>>>>>>>>> http://www.sourceforge.net/community/cca08 >>>>>>>>>> _______________________________________________ >>>>>>>>>> Ejbca-develop mailing list >>>>>>>>>> Ejb...@li... >>>>>>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>> -- >>>>>>>> PrimeKey Solutions offers a commercial EJBCA support subscription >>>>>>>> and >>>>>>>> training for EJBCA. Please see www.primekey.se or contact >>>>>>>> in...@pr... >>>>>>>> for more information. >>>>>>>> http://download.primekey.se/documents/ejbca_subscription.pdf >>>>>>>> http://download.primekey.se/documents/ejbca_training.pdf >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> ------------------------------------------------------------------------- >>>>>>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! >>>>>>>> Studies have shown that voting for your favorite open source >>>>>>>> project, >>>>>>>> along with a healthy diet, reduces your potential for chronic >>>>>>>> lameness >>>>>>>> and boredom. Vote Now at http://www.sourceforge.net/community/cca08 >>>>>>>> _______________________________________________ >>>>>>>> Ejbca-develop mailing list >>>>>>>> Ejb...@li... >>>>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>> ------------------------------------------------------------------------- >>>>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! >>>>>> Studies have shown that voting for your favorite open source project, >>>>>> along with a healthy diet, reduces your potential for chronic >>>>>> lameness >>>>>> and boredom. Vote Now at http://www.sourceforge.net/community/cca08 >>>>>> _______________________________________________ >>>>>> Ejbca-develop mailing list >>>>>> Ejb...@li... >>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>> -- >>>> PrimeKey Solutions offers a commercial EJBCA support subscription and >>>> training for EJBCA. Please see www.primekey.se or contact >>>> in...@pr... for more information. >>>> http://download.primekey.se/documents/ejbca_subscription.pdf >>>> http://download.primekey.se/documents/ejbca_training.pdf >>>> >>>> >>>> >>>> ------------------------------------------------------------------------- >>>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! >>>> Studies have shown that voting for your favorite open source project, >>>> along with a healthy diet, reduces your potential for chronic lameness >>>> and boredom. Vote Now at http://www.sourceforge.net/community/cca08 >>>> _______________________________________________ >>>> Ejbca-develop mailing list >>>> Ejb...@li... >>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>> >>>> >>>> >>> http://www.nabble.com/file/p18458610/ejbcawsracli.properties >>> ejbcawsracli.properties >>> >>> >> >> > > > -- > PrimeKey Solutions offers a commercial EJBCA support subscription and > training for EJBCA. Please see www.primekey.se or contact in...@pr... > for more information. > http://download.primekey.se/documents/ejbca_subscription.pdf > http://download.primekey.se/documents/ejbca_training.pdf > > > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the > world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > > -- View this message in context: http://www.nabble.com/generate-a-server-cetificate-with-cli-tp18381909p18487291.html Sent from the EjbCA - Dev mailing list archive at Nabble.com. |