Re: [Ejbca-develop] Interop cmpforopenssl with EJBCA

[ejbca-support <ejb...@pr...>]

On 2012-10-09 13:59, dominic peter wrote:
> Hi,

Hi Dominic,
> 
> Has anyone tried to interop cmpforopenssl client with EJBCA.


Yes,
http://www.ejbca.org/adminguide.html#Interoperability

> 
> I am trying to send an 'ir' request to EJBCA from the cmpforopenssl client using the following command,
> 
> ./cmpclient --server localhost --port 8080 --path ejbca/publicweb/cmp --srvcert myAdminCA.cacert.pem --ir --user test1 --password test1 --newclcert test1.pem --newkey test1.key --subject "C=IN,ST=KAR,L=TEST,O=TEST,OU=
> EN,CN=EETest1"
> 
> I am seeing the following error on the EJBCA after sending the 'ir' request from the client,
> 
> 15:40:36,975 ERROR [CrmfMessageHandler] Could not extract password from CRMF request using the RegTokenPwd authentication module
> 15:40:36,997 INFO  [CmpServlet] Sent a CMP response to: 127.0.0.1, process time 217.
> 
> On the cmpclient i am seeing the following error,
> 
> INFO: Sending Initialization Request
> ERROR: received no initial Client Certificate. FILE cmpclient.c, LINE 401
> 3078551176 <tel:3078551176>:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1319:
> 3078551176 <tel:3078551176>:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:381:Type=X509
> 3078551176 <tel:3078551176>:error:32090087:CMP routines:CMP_doInitialRequestSeq:pkibody error:cmp_ses.c:384:bodytype=23, error="PKIStatus: rejection, PKIFailureInfo: wrongAuthority"
> 
> And ideas ?

Check configuration.

Cheers,
Anders
tech support

> 
> Thanks in advance.
> 
> Regards
> 
> 
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>