[OpenXPKI-users] Issue importing certificates on fresh install

[Kristoffer N. <kri...@ou...>]

I'm setting up an OpenXPKI instance on a freshly installed Debian Bookworm installation but I'm running into an issue when creating and attempting to import the datavault token.

I've followed the instructions in the quickstart to create the datavault token key for the assymetric vault but I am unable to add the certificate using the supplied command. No matter what way I type out the certificate path I get the error "The value for parameter *cert* does not match the expected type/pattern."

Running the oxi command with the verbose flags did not offer me much assistance in figuring out what I did wrong. I've also made sure that the overall configuration is OK by running the "openxpkiadm lintconfig" command. There is also nothing written to the openxpki-server or openxpki-client logs when the "oxi certificate add" command is executed.

Commands used:

$ mkdir -p -m755 /etc/openxpki/local/keys
$ cd /etc/openxpki/local/keys
$ openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:3072 -aes-256-cbc \
      -out vault-1.pem
$ openssl req -config /etc/openxpki/contrib/vault.openssl.cnf -x509 -days 365 \
      -key vault-1.pem -out vault-1.crt
$ oxi certificate add --cert vault.crt

also tried with:

$ oxi certificate add --cert vault-1.crt

Any idea where I'm going wrong or what may cause this particular error message?