Re: [Ejbca-develop] Error in running openssl cmp client

[Sriram <sri...@gm...>]

Hi Aveen,

Thanks for the reply. I was able to resolve it. I am using ejbca-6.0.3.
I gave full URL as the name for the cmp configuration. That was the issue.

Regards,
Sriram


On Thu, Jan 30, 2014 at 3:45 PM, Aveen Ismail <av...@pr...> wrote:

>  Hi Sriram,
>
> What EJBCA version are you running? What are your CMP configurations? Do
> you have server logs I can look at?
>
> If you are using cmp alias, then the URL you should use in the openssl
> command line is also: http://10.206.1.3:8080/ejbca/publicweb/cmp/cmpalias
> If you don't put the alias "cmpalias" in the URL, then EJBCA will use the
> alias "cmp", whose values might not be the ones you are expecting!
>
> Best regards,
> Aveen
>
>
>
> On 01/28/2014 12:03 PM, Sriram wrote:
>
> Hello Everyone,
>
> Whenever I run openssl with cmp like below,
>
> /root/sriram/cmpforopenssl-code/src/openssl-1.0.1e-cmp/apps/openssl cmp
> -cmd ir
> -server 10.206.1.3:8080 -path ejbca/publicweb/cmp -srvcert
> certs/ManagementCA.pem -user cmptest
> -pass CMP-pwd -newkey certs/cl_key.pem -certout certs/cl_cert.pem -subject
> "/CN=cmptest"
>
> it throws an error like "PKIStatus: rejection, PKIFailureInfo:
> incorrectData"
>
> I am suspecting some configuration issue in ejbca.I have certificate
> profile, end entity profile,
> end entity and CA. I also did configuration of CMP.
> CMP configuration alias is,
> http://10.206.1.3:8080/ejbca/publicweb/cmp/cmpalias.
> But when I paste that on the browser, its not giving any info.
> Wireshark traces show that URL doesnt exists.
> Any help on ejbca cmp configuration is welcome.
>
>
> Regards,
> Sriram
>
>
>
> ------------------------------------------------------------------------------
> WatchGuard Dimension instantly turns raw network data into actionable
> security intelligence. It gives you real-time visual feedback on key
> security issues and trends.  Skip the complicated setup - simply import
> a virtual appliance and go from zero to informed in seconds.http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> Ejbca-develop mailing lis...@li...://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>
>
> --
> Med vänlig hälsning / Kind regards,
> Aveen Ismail
> PKI Specialist - R&D
>
> PrimeKey Solutions AB
> Andertorpsv.16
> 17154 Solna
> Sweden
>
> Phone. +46735881655
> Skype-ID: aveen47111www.primekey.se
>
>