|
From: stupidtss <sim...@si...> - 2009-10-09 05:39:44
|
I have also tested with the superadmin account as set in the ejbcawsracli.properties file but also failed (I have already generated the superadmin.jks and placed it in the \ejbcawscli folder (the error is BAD_USER_TOKEN_TYPE). stupidtss wrote: > > I try to create CVC request. Before that, I think I should create an user > so that I can use the WS CLI. > > Under the "Web Services authentication", I find the following command > sample: > > ejbca ra adduser <1> <2> "C=..,O=..,CN=<1>" null AdminCA null 1 JKS > ejbca ra setclearpwd <1> <2> > ejbca batch > ejbca admins addadmin "Temporary Super Administrator Group" AdminCA > WITHCOMMONNAME QUALCASEINS <1> > > If my CVC CA is "HK", my DV is HKDV, and there is also a CA called > AdminCA1 which is created during installation, which CA should I used in > the command above? I have test all three, and only AdminCA1 works. All > the other two returns with message saying that CA not found. > > Should I select AdminCA1 as the name of CA? > > Furthermore, when I later issue the cvcwscli cvcrequest command, a > BAD_USER_TOKEN_TYPE error keeps coming up saying that only USERGENERATED > can be used for cvc. But if I use USERGENERATED in creating the user > name, no .JKS is generated and the cvcwscli cvcrequest command returns > with an LOGIN_ERROR. > > Please help. Thanks. > > > stupidtss wrote: >> >> This post is a little bit off-topic. Please accept my apologies. >> >> I am new to programming, and I was assigned to work on the CVCA Key >> Management Protocol for SPOC. >> >> One of the input parameter required (for the RequestCertificate message) >> is the "certificate request". Can anyone here point me the way on how to >> construct and handle this "certificate request"? Thanks very much. >> > > -- View this message in context: http://www.nabble.com/Anyone-familiar-with-CVCA-Key-Management-Protocol-for-SPOC--tp25326299p25815759.html Sent from the EjbCA - Dev mailing list archive at Nabble.com. |