RE: [Openca-Users] shell-init could not get directory

[Tim B. <tb...@oc...>]

Hi again

> > shell-init: could not get current directory
> > job-working-directory: could not get current directory
>
> This is very strange error --- check if the user the web server
> of the CA is
> running as has access to the $CA/ $cgi-ca/ and $htdocs-ca/ directories.

They are both set to nobody.nobody.  I'll investigate a bit more because
these might be related to other issues that my installation is raising for
me.

> > Can't call method "errno" on an undefined value at
> lib/crypto-utils.lib line
> > 60
> > Compilation failed in requre at /usr/local/www/CA-cgi/ca line 160
> > I have perl v 5.6.1
> > openssl v 9.6
> > openca0.8.0.20010610
>
> Here the problem seems related to the initialization of the
> signature object.

The latest OpenCA-0.8.20010623 solved the above problem.   However, when it
gives me the Form where I can approve the request on the CA-web there is
still a signature error on the top right of the form.  Is this expected
behaviour or is it telling me that it doesn't like my RA user cert?
Remember that I used a self-produced original CA Cert?  Could there be a
problem with that certificate?

> I am not sure this could fix all of your problems, but you should not use
> the 9.6 version of OpenSSL but one of the most recent SNAPs. You
> can download
> one from:
>
> 	ftp://openca.sf.net/pub/openca/tools
>
> download the OpenSSL snap from here if you have errors installing
> one of the
> latest available directly from OpenSSL...
>

I also now get a bad usage for openssl ca (unknown option -extfile) which is
probably due to not having the correct version of openssl.  I am not clear
which version of openssl to download.  There is only an OpenCa-SNAP at the
ftp site mentioned above but it doesn't contain openssl (only some patches
for 9.4) ...

Can you explain a bit more about the SNAP and how I should use it?

Thanks again
Tim