|
From: Sriram <sri...@gm...> - 2014-01-28 11:03:44
|
Hello Everyone, Whenever I run openssl with cmp like below, /root/sriram/cmpforopenssl-code/src/openssl-1.0.1e-cmp/apps/openssl cmp -cmd ir -server 10.206.1.3:8080 -path ejbca/publicweb/cmp -srvcert certs/ManagementCA.pem -user cmptest -pass CMP-pwd -newkey certs/cl_key.pem -certout certs/cl_cert.pem -subject "/CN=cmptest" it throws an error like "PKIStatus: rejection, PKIFailureInfo: incorrectData" I am suspecting some configuration issue in ejbca.I have certificate profile, end entity profile, end entity and CA. I also did configuration of CMP. CMP configuration alias is, http://10.206.1.3:8080/ejbca/publicweb/cmp/cmpalias. But when I paste that on the browser, its not giving any info. Wireshark traces show that URL doesnt exists. Any help on ejbca cmp configuration is welcome. Regards, Sriram |