Re: [OpenXPKI-users] Issue: Your system status is critical!

[Arthur H. <obf...@gm...>]

Oliver,

Thank you for your help, however I am still running into issues:

1. While logging in as operator and going to "PKI Operation" and "Publish
CA/CRL" I'm encountering: "Unknown error (server workflow error on execute)"

2. I'm also seeing that the "Tokens of type datasafe" are status:OFFLINE. I
followed your recommendation and created a new self-signed cert in the
SSL/realm directory and imported it (I am using my own test realm, not the
sample script), but maybe I missed a step?

Thanks again,
-Arthur

On Thu, Jun 28, 2018 at 7:08 AM Oliver Welter <ma...@ol...> wrote:

> Hi Arthur,
>
> > CRL expired - update required!
> Login as Operator, go to "PKI Operations" and "Issue CRL".
> I recommend just running a cronjob doing this
> /usr/bin/openxpkicmd crl_issuance
>
> > Encryption token is expired
> Generate a new Encryption Certificate/Key Pair - as this is used
> internally only, you can use a selfsigned one.
> Put the key file to /etc/openxpki/ssl/ca-one/ca-one-vault-2.pem
>
> Import the generated certificate and mark it as crypto token
> openxpkiadm certificate import  --file vaultcert.crt --realm ca-one
> --token datasafe
>
> Note: The password for the key must match the value in crypto.yaml - if
> you used the sample setup script, the password is "root".
>
> Oliver
>
> --
> Protect your environment -  close windows and adopt a penguin!
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> OpenXPKI-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>