Re: [OpenXPKI-users] scep enrollment request

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hi Marian,

sorry if this question sounds to stupid, but: Is the OpenXPKI daemon 
running?

If so, can you please check the openxpki.log and check on the WebUI -> 
Workflow Search if a workflow of type "enrollment" was created.

Oliver

Am 10.12.2015 um 23:44 schrieb Marian Thieme:
> Dear openxpki-users !
>
> I have a problem regarding the scep servive.
>
> I followed this howto:
> http://openxpki.readthedocs.org/en/latest/quickstart.html
>
> In order to test scep service, I got the sscep client
> (https://github.com/certnanny/sscep) and created a certificate signing
> request, with command lines as described in the howto.
>
> The results was not successful:
>
> Server side logs:
>
> /var/log/apache2/access.log
> 192.168.56.1 - - [10/Dec/2015:22:36:26 +0100] "GET
> /scep/scep?operation=PKIOperation&message=MIIKCg... HTTP/1.0" 500 810
> "-" "-"
>
> /var/log/apache2/error.log
> [Thu Dec 10 22:36:26 2015] scep: Use of uninitialized value $result in
> print at /usr/lib/cgi-bin/scep line 135.
> [Thu Dec 10 22:36:26.734078 2015] [cgid:error] [pid 1754:tid
> 140114634200832] [client 192.168.56.1:55138] End of script output before
> headers: scep
>
> /var/openxpki/scep.log
> 2015/12/10 22:36:26 DEBUG:1935 Used configfile
> /etc/openxpki/scep/default.conf
> 2015/12/10 22:36:26 INFO:1935 Incoming request from 192.168.56.1 with
> PKIOperation
>
> Client:
> $ ./sscep_static enroll -u http://192.168.56.219/scep/scep     -k
> tmp/scep-test.key -r tmp/scep-test.csr     -c tmp/cacert-0     -l
> tmp/scep-test.crt     -t 10 -n 1 -v
>
> ./sscep_static: starting sscep, version 0.6.1
> ./sscep_static: new transaction
> ./sscep_static: transaction id: D41D8CD98F00B204E9800998ECF8427E
> ./sscep_static: hostname: 192.168.56.219
> ./sscep_static: directory: scep/scep
> ./sscep_static: port: 80
> ./sscep_static:  Read request with transaction id:
> 1F60D3FEF28924F69BEA4AAA9DD158FB
> ./sscep_static: generating selfsigned certificate
> ./sscep_static: SCEP_OPERATION_ENROLL
> ./sscep_static: sending certificate request
> ./sscep_static: creating inner PKCS#7
> ./sscep_static: inner PKCS#7 in mem BIO
> ./sscep_static: request data dump
> -----BEGIN CERTIFICATE REQUEST-----
> MIICi...
> -----END CERTIFICATE REQUEST-----
> ./sscep_static: data payload size: 654 bytes
> ./sscep_static: successfully encrypted payload
> ./sscep_static: envelope size: 1096 bytes
> ./sscep_static: creating outer PKCS#7
> ./sscep_static: signature added successfully
> ./sscep_static: adding signed attributes
> ./sscep_static: adding string attribute transId
> ./sscep_static: adding string attribute messageType
> ./sscep_static: adding octet attribute senderNonce
> ./sscep_static: PKCS#7 data written successfully
> ./sscep_static: applying base64 encoding
> ./sscep_static: base64 encoded payload size: 3486 bytes
> ./sscep_static: server returned status code 500
> ./sscep_static: mime_err: HTTP/1.1 500 Internal Server Error
> Date: Thu, 10 Dec 2015 21:36:26 GMT
> Server: Apache/2.4.10 (Debian)
> Content-Length: 618
> Connection: close
> Content-Type: text/html; charset=iso-8859-1
>
> <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
> <html><head>
> <title>500 Internal Server Error</title>
> </head><body>
> <h1>Internal Server Error</h1>
> <p>The server encountered an internal error or
> misconfiguration and was unable to complete
> your request.</p>
> <p>Please contact the server administrator at
>   webmaster@localhost to inform them of the time this error occurred,
>   and the actions you performed just before this error.</p>
> <p>More information about this error may be available
> in the server error log.</p>
> <hr>
> <address>Apache/2.4.10 (Debian) Server at ca-server1.fritz.box Port
> 80</address>
> </body></html>
>
> ./sscep_static: wrong (or missing) MIME content type
> ./sscep_static: error while sending message
>
> ------------------------------------------------------------------------------
> _______________________________________________
> OpenXPKI-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>

-- 
Protect your environment -  close windows and adopt a penguin!