From: Johan E. <ejb...@pr...> - 2009-03-31 05:40:44
|
Ok. So we know now that the server-side SSL certificate is ok. In this older versions of EJBCA you had to change the Java truststore. Try copying JAVA_HOME\jre\lib\security\cacerts to the corresponding location on the new machine and restart JBoss. Please note that you can have several different JAVAs/JDKs on the same machine så make sure you copy to the right one (under the JDK). Try to connect to "https://localhost:8443/ejbca" (client authenticated SSL). Best Regards, Johan dubutianya skrev: > Thanks Johan for your help. > > According to your words,i enter "https://localhost:8442/ejbca" in IE, then i > can see the ejbca "welcome page",and when i click "Administration", the new > page shows: > > "Authorization Denied > Cause : Client certificate required." > > As to "http://localhost:8080/ejbca/retrieve/ca_certs.jsp", it doesn't > work...^^! Error 404. > > > > Johan Eklund wrote: > >> Hi dubutianya, >> >> First, great to hear that you are using EJBCA! =) >> >> If you change "http://localhost:8080/ejbca" to only server-side SSL >> "https://localhost:8442/ejbca"does this show up as the same error? >> >> If so, you need to install the issuing CA of tomcat.jks as a trusted CA >> in Windows. You can download the certificate from >> "http://localhost:8080/ejbca/retrieve/ca_certs.jsp" >> >> If this doesn't work, could you provide some more infomration on the >> error? >> >> Best Regards, >> Johan >> >> dubutianya skrev: >> >>> Hi all. >>> >>> first,I'm sorry,because my English skill is very poor....^^!. >>> >>> And the following words is my problem description: >>> >>> (1)I have 2 computers: C1(linux) and C2(windows).The C1 installed an >>> ejbca3.4.4 with jboss4.2.2,it also installed an ejbca database(Mysql). >>> >>> (2)I want to backup the data of ejbca on C1 to C2.So I do it like this: >>> Backup the database (copy database on C1 to C2). >>> Backup all $EJBCA_HOME/conf/** (backup all *.properties files.) >>> Backup all $EJBCA_HOME/p12/** (backup 2 files : >>> "superadmin.p12","tomcat.jks") >>> >>> Restore database (it's Ok). >>> Unzip new EJBCA (it's still ejbca3.4.4). >>> Restore conf and p12 (copy the "superadmin.p12","tomcat.jks" to >>> $EJBCA_HOME/p12 on C2). >>> Run "ant deploy" . >>> >>> as same as User Guide. >>> >>> (3)The jboss on the C2 can start up and I can see the new ejbca's page >>> after >>> enter "http://localhost:8080/ejbca" in IE. >>> >>> (4)I doubleclick "superadmin.p12" for import superadmin's cer.And import >>> success.But i can't visit the new ejbca's adminweb....I also use firefox >>> to >>> try this,still fail.... >>> >>> How resolve this problem? thanks! >>> >>> >> -- >> PrimeKey Solutions offers a commercial EJBCA support subscription and >> training for EJBCA. Please see www.primekey.se or contact in...@pr... >> for more information. >> http://download.primekey.se/documents/ejbca_subscription.pdf >> http://download.primekey.se/documents/ejbca_training.pdf >> >> >> >> >> ------------------------------------------------------------------------------ >> >> _______________________________________________ >> Ejbca-develop mailing list >> Ejb...@li... >> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >> >> >> > > -- PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact in...@pr... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf |