Re: [Ejbca-develop] Problems with DemoCertReqServlet.java

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

On 2012-10-10 16:06, Christian Felsing wrote:
> Hello,
> 
> while DemoCertReqServlet.java works with Firefox, I ran into problems
> with Internet Explorer. Servlet creates a user and ejbca a certificate.

Have you tried the EJBCA public web?  This is the supported form
of browser enrollment.

Cheers,
Anders
tech support

> 
> IE does not like answer from ejbca, I got an error
> 
> SCRIPT438: Object doesn't support this property or method.:
> 'g_objClassFactory.CreateObject'
> opencertreq, Zeile 139 Zeichen 4
> 
> This is code IE got from ejbca:
> 
> <!-- Header -->
> 
> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
>      "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
> <html>
>   <head>
>     <meta http-equiv="Content-Type" content="text/html;
> charset=ISO-8859-1" />
>     <title><%=
> org.ejbca.config.InternalConfiguration.getAppNameCapital() %> Public
> Web</title>
> 	<link rel="shortcut icon" href="images/favicon.png" type="image/png" />
>     <link rel="stylesheet" href="styles.css" type="text/css" />
>     <script type="text/javascript" src="scripts/functions.js"></script>
>     <script type="text/vbscript" src="scripts/functions.vbs"></script>
>   </head>
> 
>   <body>
>     <div id="header">
> 		<div id="banner">
> 			<a href="index.jsp"><img src="images/logotype.png" alt="EJBCA" /></a>
> 		</div>
>     </div>
>     <div class="menucontainer">
>       <div class="menu">
>         <ul>
>           <li><div class="menuheader">Enroll</div>
>             <ul>
>               <li>
>                 <a href="enrol/browser.jsp">Create Browser Certificate</a>
>               </li>
>               <li>
>                 <a href="enrol/server.jsp">Create Server Certificate</a>
>               </li>
>               <li>
>                 <a href="enrol/keystore.jsp">Create Keystore</a>
>               </li>
>             </ul>
>           </li>
>           <li><div class="menuheader">Retrieve</div>
>             <ul>
>               <li>
>                 <a href="retrieve/ca_certs.jsp">Fetch CA &amp; OCSP
> Certificates</a>
>               </li>
>               <li>
>                 <a href="retrieve/ca_crls.jsp">Fetch CA CRLs</a>
>               </li>
>               <li>
>                 <a href="retrieve/latest_cert.jsp">Fetch User's Latest
> Certificate</a>
>               </li>
>             </ul>
>           </li>
>           <li><div class="menuheader">Miscellaneous</div>
>             <ul>
>               <li>
>                 <a href="retrieve/list_certs.jsp">List User's
> Certificates</a>
>               </li>
>               <li>
>                 <a href="retrieve/check_status.jsp">Check Certificate
> Status</a>
>               </li>
>               <li>
>               <a href="adminweb/index.jsp">Administration</a>
>             </li>
>             </ul>
>           </li>
>         </ul>
>       </div>
>     </div>
>     <div class="main">
>       <div class="content">
> <!-- Header -->
> 
> <object classid="clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1"
> CODEBASE="/CertControl/xenroll.cab#Version=5,131,3659,0"
> id="g_objClassFactory"></object>
> <!-- Updated w CertEnroll for Vista
> Class ID: {884e2049-217d-11da-b2a4-000e7bbb2b09}
> -->
> <!-- New updated enrollment activeX-control 2002-09-02 (Q323172)
> New Xenroll.dll information:
> Class ID: {127698e4-e730-4e5c-a2b1-21490a70c8a1}
> sXEnrollVersion="5,131,3659,0"
> 
> New Scrdenrl.dll information:
> Class ID: {c2bbea20-1f2b-492f-8a06-b1c5ffeace3b}
> sScrdEnrlVersion="5,131,3642,0"
> -->
> <!-- Old Xenroll.dll information:
> Class ID: {43F8F289-7A20-11D0-8F06-00C04FC295E1}
> 
> Old Scrdenrl.dll information:
> Class ID: {80CB7887-20DE-11D2-8D5C-00C04FC29D45}
> -->
> 
> 	<script language="VBScript" type="text/vbscript">
>     cert =
> "MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAaCA" & _
> "JIAEBUVKQkNBAAAAAAAAoIAwggMlMIICDaADAgECAghCKLQdjWjN8TANBgkqhkiG" & _
> "9w0BAQsFADARMQ8wDQYDVQQDDAZEZW1vQ0EwHhcNMTIxMDEwMTMzODE2WhcNMTQx" & _
> "MDEwMTMzODE2WjATMREwDwYDVQQDDAh0ZXN0MDAwMTCCASIwDQYJKoZIhvcNAQEB" & _
> "BQADggEPADCCAQoCggEBAM1sXTv9DQtuMmWDEi41hOr4ciAXWgJiz+zIbajcJWKn" & _
> "cxWxAPoEuQO/qdPphJLWhnZUZBrGNBebSZt20npkrC/CZAOpH3fCn5UK+nRHn2is" & _
> "ehOxaThD7c1tS52zALrFOubHXdraZcKYHmE7MtDWAWM6lgCfQw0RqcG3ncnk0nZ2" & _
> "XJpq3Y/gXQ53ff+Cu5xg0lVWGIhf8H67wBY3nX8NnYry81ACkPLFt5UYNMZRAJHY" & _
> "6RnOo2xvcXZ1f+8qVc4FsZLptGuOmgnTqBoJIbO0MF/jHG27j4UhnOomNQOB6RjL" & _
> "q38lCNr66P1MXkTBiTpvt6B48fA09MrgeHvJlcrz060CAwEAAaN/MH0wHQYDVR0O" & _
> "BBYEFN8h9p8GpEAuTbqY4n/uRqhn1OUEMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgw" & _
> "FoAUzDTvpOBPQ8aLW2nt7s0MqDuKfT0wDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQW" & _
> "MBQGCCsGAQUFBwMCBggrBgEFBQcDBDANBgkqhkiG9w0BAQsFAAOCAQEAgdqaP+b0" & _
> "9RC8Nmw5VR0kmD3i1KukHUIehRf6oBbsYjWkIKU3HFDreZ9SqYIuVfKr+iyfKGR3" & _
> "IMn59nYIq2pL+KY2MH72lsce50/4EifwnO84cxvVnWak2I4d9rXb+9jdA52hkYge" & _
> "kXFzjELtEZUP+550nqX1upbil9Gon87ctHvouWvkdb7PlgirW/ZmXFCcHxYaF8VK" & _
> "eVsrQj/KCGdCeG57mqIclpNpKOS2zkkB6dCaFg8IaxB6VCNK/wN2+rq1i9lWQkv/" & _
> "BncJRNTfTcpxNdJxIMg4Xpe7gq7csz+HRw/7ng9f6f9AX/h6xlsCAxmPewhPp1sq" & _
> "f0fPtoQkrRZRdjCCAwcwggHvoAMCAQICCFldFdeJGR3rMA0GCSqGSIb3DQEBCwUA" & _
> "MBExDzANBgNVBAMMBkRlbW9DQTAeFw0xMjEwMDcxMjEzNDZaFw0zNzEwMDgxMjEz" & _
> "NDZaMBExDzANBgNVBAMMBkRlbW9DQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC" & _
> "AQoCggEBALbji9I2uyYPBcHcGYvtDghSzENJa4ncXpWO9r95u1FyOrQI28eNt7k3" & _
> "f/lovQqD1GzUt2FxjEuziM+YTSWqVGeti3+1rtAnYtn7UXJT70wbhELgDjaED0rL" & _
> "N3BiTircxBjpVk4RiLKXoj5feblqOULTdqRpHM/aco7cksXbqv9SN/cUFxjSQ9vj" & _
> "YiY+dIEllVUquERUJE+pEs/R1mWJ2WGJHcuvhOeIKYG2nQaE0G6ATXYyvPPyn3r1" & _
> "AERRTvw9ESNn6IiN9DtA+D8dpt3jYplNMy3CJ2QgkbahPU1hzakbJ3AfSfgUWOop" & _
> "Rpbm5EWe4Whi3LDlw88z9uG3oTqhaXcCAwEAAaNjMGEwHQYDVR0OBBYEFMw076Tg" & _
> "T0PGi1tp7e7NDKg7in09MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUzDTv" & _
> "pOBPQ8aLW2nt7s0MqDuKfT0wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUA" & _
> "A4IBAQC08FYY/4ypawrQRbtTG12vya2f/lWY+jMiCZhxyN1ZpFf/bquKHn4gc6cn" & _
> "im1OqVkVBh5ToScXooRiFw2NHvt26r2pADqxg78fZw6HoVDzHl3X16V7g9An6lLM" & _
> "7PFfDBfoRlD8pxcEewvPscFl7uhP+c9NhGoiLcRNK4UZJRu1a2bTpmNdjWefnJlN" & _
> "X0e3dqWpdgyXXwExt4hV4NgJakPteGvn9OOQLGs1oAZ98O1+QpI6Ieg/ipW3c/51" & _
> "cgevm3qetMZAovnMj/SoQNCqVrf/Tr1+54OkdZMQV4YX7hPuaj1vMYCbnULfokx2" & _
> "voEIw4anzsJRsUyJ79tAVcOPffTvAAAxggGjMIIBnwIBATAdMBExDzANBgNVBAMM" & _
> "BkRlbW9DQQIIWV0V14kZHeswCQYFKw4DAhoFAKBdMBgGCSqGSIb3DQEJAzELBgkq" & _
> "hkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEyMTAxMDEzNDgxNlowIwYJKoZIhvcN" & _
> "AQkEMRYEFGAqpHyu+gYYDDL/ObHCjRjA1HtXMA0GCSqGSIb3DQEBAQUABIIBAG22" & _
> "ntnlArmfJN11v9Uw+JPE3lVBoBxBVRAFcYhJPmu6rzxPJsKaQGAYta6yQkJMRAO1" & _
> "2qYRpnyRUciy+kqmP/ll3bZUmg7Fa1xR1nYmnVLjabSQJi/LBsGixbEU2hha2IdH" & _
> "LhiPO60pY9kdygVx7YzxeGqddjMARVGpFiOzmhmmzGT0B4OsaOuMUvAbnaLhPzL/" & _
> "S8A7De7AjrNWOF/Is5yoOacvYBDoxISSK8FFtGzJmDhXNdncAP1CzEwfNO4j9iMx" & _
> "SOfNvv4Xuk59Mdvuuael6qs4pP2+GDrm4AM2aFBn4DKil3/w7nY1SZsu8jOG/KTh" & _
> "kE23CfecV9SivA/ilzgAAAAAAAA="
> 	
> 		' This function can be moved to functions.vbs when the header is
> parsed as jsp
> 		Sub installcertvista
> 			Dim objEnroll
> 			Set objEnroll =
> g_objClassFactory.CreateObject("X509Enrollment.CX509Enrollment")
> 			Call objEnroll.Initialize(1)	'EnrollmentContext UserContext
> 			err.clear
> 			On Error Resume Next
> 	        Call objEnroll.InstallResponse(0, cert, 6, "")	'AllowNone, ,
> XCN_CRYPT_STRING_BASE64_ANY, pw
> 	        If err.number = -2146762487	Then	' 0x800b0109 Not trusted root
> 	        	r = Msgbox("Could not complete the request since, the CAs'
> certificates were not properly installed.", , "Certificate Management")
> 			ElseIf err.number <> 0 Then
> 				r = Msgbox("The certificate could not be installed", , "Certificate
> Management")
> 			Else
> 				r = Msgbox("A new certificate has been installed", , "Certificate
> Management")
> 			End If
> 		End Sub
> 	
> 		Sub installcert
> 			Err.Clear
> 			On Error Resume Next
> 			g_objClassFactory.acceptPKCS7(cert)
> 			If Err.Number <> 0 Then
> 				r = Msgbox("The certificate could not be installed in this web
> browser", , "Certificate Management")
> 			Else
> 				r = Msgbox ("A new certificate has been installed", , "Certificate
> Management")
> 			End if
> 		End Sub
> 	
> 		If InStr(navigator.userAgent, "Windows NT 6") <> 0 Then
> 			installcertvista
> 		Else
> 			installcert
> 		End If
> 	<
> 
> 
> 
> 
> 
> any hints?
> 
> best regards
> Christian
> 
> 
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 