Re: [OpenXPKI-users] SCEP error

[Oliver W. <ma...@ol...>]

thats exactly the reason - it tries to load a policy configuration from 
a node that is not found, if you have also blindly upgraded the 
configuration to the recent HEAD then the explicit servername=generic 
was dropped from the SCEP configuration to make it working with the 
"autodiscovery" feeature. So you should either use /scep/generic as URL 
or create scep/generic.yaml inside the realm.

Oliver

On 25.08.23 13:05, Nick Dawson wrote:
> Just curious why you have ./scep/scep in the url?
> OpenXPKI's wrapper expansion may be looking for a script that doesn't 
> exist
>
>
> On Fri, Aug 25, 2023 at 3:57 AM, chris 
> <ope...@li...> wrote:
>
>     Hello everyone,
>     i am testing the new version of openxpki v3.26 and i came across
>     this error while sending scep request, i am using the same config
>     which was working on v3.25.5. heres the error:
>
>
>     root@debian:~# sscep enroll -u http://localhost/scep/scep
>     <http://localhost/scep/scep>  -k scep-test.key -r scep-test.csr -c
>     cacert-0 -l scep-test.crt -t 10 -n 1
>     sscep: sending certificate request
>     sscep: valid response from server
>     sscep: reply transaction id: B8D5ADA2E399B6992BC3FC40DFD98714
>     sscep: pkistatus: FAILURE
>     sscep: reason: Transaction not permitted or supported
>
>
>
>     this is the log:
>     2023/08/25 14:28:36 openxpki.auth.INFO <http://openxpki.auth.INFO>
>     Login successful (user: Anonymous, role: System) [pid=4413|sid=mO8c]
>     2023/08/25 14:28:36 openxpki.auth.INFO <http://openxpki.auth.INFO>
>     Login successful (user: Anonymous, role: System) [pid=4414|sid=vwI5]
>     2023/08/25 14:28:38 openxpki.application.WARN No policy params set
>     in LoadPolicy
>     [pid=4414|user=Anonymous|role=System|sid=vwI5|wftype=certificate_enroll|wfid=1023]
>     2023/08/25 14:28:38
>     OpenXPKI.Server.Workflow.Condition.KeyParams.ERROR
>     configuration_error exception thrown from
>     [OpenXPKI::Server::Workflow::Condition::KeyParams: 40; before:
>     OpenXPKI::Server::Workflow::Condition: 53]: You must pass either
>     the profile name or the key_rules directly
>     [pid=4414|user=Anonymous|role=System|sid=vwI5|wftype=certificate_enroll|wfid=1023]
>     2023/08/25 14:28:38
>     OpenXPKI.Server.Workflow.Condition.KeyParams.ERROR
>     configuration_error exception thrown from
>     [OpenXPKI::Server::Workflow::Condition::KeyParams: 40; before:
>     OpenXPKI::Server::Workflow::Condition: 53]: You must pass either
>     the profile name or the key_rules directly
>     [pid=4414|user=Anonymous|role=System|sid=vwI5|wftype=certificate_enroll|wfid=1023]
>
>     how can i fix it?
>
>
>     Regards,
>     Chris
>
>
>     _______________________________________________
>     OpenXPKI-users mailing list
>     Ope...@li...
>     <mailto:Ope...@li...>
>     https://lists.sourceforge.net/lists/listinfo/openxpki-users
>     <https://lists.sourceforge.net/lists/listinfo/openxpki-users>
>
>
>
>
> _______________________________________________
> OpenXPKI-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openxpki-users

-- 
Protect your environment -  close windows and adopt a penguin!