|
From: Sriram <sri...@gm...> - 2014-01-30 10:49:46
|
Hi Aveen, Thanks for the reply. I was able to resolve it. I am using ejbca-6.0.3. I gave full URL as the name for the cmp configuration. That was the issue. Regards, Sriram On Thu, Jan 30, 2014 at 3:45 PM, Aveen Ismail <av...@pr...> wrote: > Hi Sriram, > > What EJBCA version are you running? What are your CMP configurations? Do > you have server logs I can look at? > > If you are using cmp alias, then the URL you should use in the openssl > command line is also: http://10.206.1.3:8080/ejbca/publicweb/cmp/cmpalias > If you don't put the alias "cmpalias" in the URL, then EJBCA will use the > alias "cmp", whose values might not be the ones you are expecting! > > Best regards, > Aveen > > > > On 01/28/2014 12:03 PM, Sriram wrote: > > Hello Everyone, > > Whenever I run openssl with cmp like below, > > /root/sriram/cmpforopenssl-code/src/openssl-1.0.1e-cmp/apps/openssl cmp > -cmd ir > -server 10.206.1.3:8080 -path ejbca/publicweb/cmp -srvcert > certs/ManagementCA.pem -user cmptest > -pass CMP-pwd -newkey certs/cl_key.pem -certout certs/cl_cert.pem -subject > "/CN=cmptest" > > it throws an error like "PKIStatus: rejection, PKIFailureInfo: > incorrectData" > > I am suspecting some configuration issue in ejbca.I have certificate > profile, end entity profile, > end entity and CA. I also did configuration of CMP. > CMP configuration alias is, > http://10.206.1.3:8080/ejbca/publicweb/cmp/cmpalias. > But when I paste that on the browser, its not giving any info. > Wireshark traces show that URL doesnt exists. > Any help on ejbca cmp configuration is welcome. > > > Regards, > Sriram > > > > ------------------------------------------------------------------------------ > WatchGuard Dimension instantly turns raw network data into actionable > security intelligence. It gives you real-time visual feedback on key > security issues and trends. Skip the complicated setup - simply import > a virtual appliance and go from zero to informed in seconds.http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk > > > > _______________________________________________ > Ejbca-develop mailing lis...@li...://lists.sourceforge.net/lists/listinfo/ejbca-develop > > > > -- > Med vänlig hälsning / Kind regards, > Aveen Ismail > PKI Specialist - R&D > > PrimeKey Solutions AB > Andertorpsv.16 > 17154 Solna > Sweden > > Phone. +46735881655 > Skype-ID: aveen47111www.primekey.se > > |