Re: [Ejbca-develop] Anyone familiar with CVCA Key Management Protocol for SPOC?

[Tomas G. <to...@pr...>]

You should read the documentation in the User Guide how to get the
Webservice interface of EJBCA up and running. It needs certificate
authentication so you need to create a JKS for that, and configure
everything in ejbcawsracli.properties.

/Tomas


stupidtss wrote:
> Thanks very much for your kind assistance.
> 
> I have tried the new command.  The following error messages come out.
> 
> ... 
> ...
> Generating a new request with base filename: certReq
> Wrote binary request to: certReq.cvreq
> Wrote private key in PKCS#8 format to to: certReq.pkcs8
> Submitting CVC request for user 'spoc_certReq'.
> 
> java.lang.Exception: Shared library 'superadmin.jks' does not exist
> org.ejbca.ui.cli.ErrorAdminCommandException: java.lang.Exception: Shared
> library 'superadmin.jks' does not exist
>           at
> org.ejbca.core.protocol.ws.client.CvcRequestCommand.execute(CvcRequestCommand.java:211)
>           at
> org.ejbca.core.protocol.ws.client.cvcwscli.main(cvcwscli.java:30)
>           at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.checkIfFIleExits(EJBCAWSRABaseCommand.java:175)
>           at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.(init)(EJBCAWSRABaseCommand.java:133)
>           at
> org.ejbca.core.protocol.ws.client.CvcRequestCommand.(init)(CvcRequestCommand.java:70)
>           at
> org.ejbca.core.protocol.ws.client.EJBCAWSRACommandFactory.getCommand(EJBCAWSRACommandFactory.java:69)
>           at
> org.ejbca.core.protocol.ws.client.cvcwscli.main(cvcwscli.java:27)
> 
> In folder \ejbcawscli, certReq.cvreq (311 bytes) and certReq.pkcs8 (634
> bytes) are created.  Does it means the command is successful and the error
> can be ignored?
> 
> stupidtss
> 
> 
> Tomas Gustavsson wrote:
>>
>> Try with a better command:
>>
>> cvcwscli cvcrequest spoc_certReq password "CN=spoc,C=SE" 00001
>> SHA256WithRSA 1024 true certReq
>>
>> CN is maximum 8 characters, you must have a country code, signature
>> algorithm is SHA256WithRSA etc...
>>
>> Cheers,
>> Tomas
>>
>>
>>
>> stupidtss wrote:
>>> Thanks.
>>>
>>> I use the web Administration interface and create a user called
>>> "spoc_certReq", password="password" with 
>>> "CN=spoc_certReq".  All other leave blank.
>>>
>>> Then when I use the following command, error occur:
>>>
>>> ...\ejbcawscli>cvcwscli cvcrequest spoc_certReq password "C=,
>>> CN=spoc_certReq password "C=, CN=spoc_certReq" null RSA 1024 true certReq
>>>
>>> Enrolling user:
>>> Username: spoc_certReq
>>> Subject name: C=, CN=spoc_certReq
>>> Sequence: null
>>> Signature algorithm: RSA
>>> Key spec: 1024
>>> Generating a new request with base filename: certReq
>>> No sequence given, using random 5 number sequence: 68036
>>> java.lang.NullPointerException
>>> org.ejbca.ui.cli.ErrorAdminCommandException:
>>> java.lang.NullPointerException
>>>           at
>>> org.ejbca.core.protocol.ws.client.CvcRequestCommand.execute(CvcRequestCommand.java:211)
>>>           at
>>> org.ejbca.core.protocol.ws.client.cvcwscli.main(cvcwscli.java:30)
>>> Caused by: java.lang.NullPointerException
>>>           at org.ejbca.cvc.ReferenceField.(init)(ReferenceField.java:43)
>>>           at
>>> org.ejbca.cvc.HolderReferenceField.(init)(HolderReferenceField.java:33)
>>>           at
>>> org.ejbca.core.protocol.ws.client.CvcRequestCommand.execute(CvcRequestCommand.java:133)
>>>           ... 1 more
>>>
>>> What is the problem?  Is it a necessary to use "ejbcawsracli" to create
>>> user
>>> for cvcrequest (I have difficulty in using "ejbcawsracli" to create user
>>> as
>>> there are many fields that I do not know how to fill in)?  
>>>
>>> Thanks in advance.
>>>
>>> stupidtss
>>>
>>>
>>> Johan Eklund wrote:
>>>> Hi,
>>>>
>>>> See: http://www.ejbca.org/cvccas.html#Command%20line%20client for 
>>>> information about how to create a certificate request for a DV.
>>>>
>>>> I hope that will give the information you are looking for.
>>>>
>>>> Kind regards,
>>>> Tham
>>>>
>>>> stupidtss wrote:
>>>>> This post is a little bit off-topic.  Please accept my apologies.
>>>>>
>>>>> I am new to programming, and I was assigned to work on the CVCA Key
>>>>> Management Protocol for SPOC.
>>>>>
>>>>> One of the input parameter required (for the RequestCertificate
>>>>> message)
>>>>> is
>>>>> the "certificate request".  Can anyone here point me the way on how to
>>>>> construct and handle this "certificate request"?  Thanks very much.
>>>>>   
>>>> ------------------------------------------------------------------------------
>>>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008
>>>> 30-Day 
>>>> trial. Simplify your report design, integration and deployment - and
>>>> focus
>>>> on 
>>>> what you do best, core application coding. Discover what's new with 
>>>> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
>>>> _______________________________________________
>>>> Ejbca-develop mailing list
>>>> Ejb...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>>
>>>>
>> ------------------------------------------------------------------------------
>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008
>> 30-Day 
>> trial. Simplify your report design, integration and deployment - and focus
>> on 
>> what you do best, core application coding. Discover what's new with 
>> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>
>>
>