Re: [SignServer-develop] key usage limit exceeded or not initialized

[Antoine L. <ant...@yo...>]

Hi,

Here is the result of getstatus brief all :
Current version of server is : SignServer 3.3.0alpha12


Status of Signer with Id 1 is :
  Worker status : Offline
  Token status  : Active
  Signings: 0
  Errors: 
    Key usage limit exceeded or not initialized



and here is the result of getstatus complete all :
Current version of server is : SignServer 3.3.0alpha12


The Global Configuration of Properties are :

 
GLOB.WORKER1.SIGNERTOKEN.CLASSPATH=org.signserver.server.cryptotokens.JKSCryptoToken

  GLOB.WORKER1.CLASSPATH=org.signserver.module.pdfsigner.PDFSigner

  The global configuration is in sync with the database.



Status of Signer with Id 1 is :
  Worker status : Offline
  Token status  : Active
  Signings: 0
  Errors: 
    Key usage limit exceeded or not initialized



Active Properties are :
  ALLOW_REQUEST_PROPERTIES_OVERRIDE=LOCATION, REASON,
ADD_VISIBLE_SIGNATURE, EMBED_CRL, EMBED_OCSP_RESPONSE,
REJECT_PERMISSIONS, SET_PERMISSIONS,
REMOVE_PERMISSIONS,SET_OWNERPASSWORD,VISIBLE_SIGNATURE_PAGE,VISIBLE_SIGNATURE_RECTANGLE,VISIBLE_SIGNATURE_CUSTOM_IMAGE_BASE64,VISIBLE_SIGNATURE_CUSTOM_IMAGE_RESIZE_TO_RECTANGLE,CERTIFICATION_LEVEL

  REASON=Signed by Yousign

  CHECKCERTPRIVATEKEYVALIDITY=false

  SIGNERCERTCHAIN=

  KEYSTOREPATH=/etc/certificates/ysKeystore.jks

  DEFAULTKEY=6

  KEYUSAGELIMIT=-1

  REQUIRE_REQUEST_PROPERTIES=ALIAS,AUTHPARAM,DEMAND

  AUTHTYPE=org.signserver.server.YousignAuthorizer

  NAME=YousignPDFSigner

  SIGNERCERT=

  KEYSTOREPASSWORD=xxxx

  CLASSPATH=org.signserver.common.ProcessableConfig

  KEYSTORETYPE=JKS

  CHECKCERTVALIDITY=false

  LOCATION=France



Active Authorized Clients are are (Cert DN, IssuerDN):
INFO  IMPLICITLYCA_Q not set, using default.
INFO  IMPLICITLYCA_A not set, using default.
INFO  IMPLICITLYCA_B not set, using default.
INFO  IMPLICITLYCA_G not set, using default.
INFO  IMPLICITLYCA_N not set, using default.
The current configuration use the following signer certificate : 

             Subject DN:     -----------
             Serial number:  -----------
             Issuer DN:      -----------
             Valid from:     2013-10-11 12:55:46 CEST
             Valid until:    2015-10-11 12:55:46 CEST





Thanks a lot !


Antoine

On Fri, 18 Oct 2013 09:18:35 +0200, Marcus Lundblad
<mar...@pr...> wrote:
> tor 2013-10-17 klockan 18:41 +0200 skrev Antoine Louiset:
>> Hi everyone,
>>
>> I have an error for a pdf worker. The cryptotoken is offline, the
>> error is : key usage limit exceeded or not initialized
>>
>> In my configuration of the worker, the value of KEYUSAGELIMIT is -1.
>>
>> Any ideas ?
>>
> 
> Hi Antoine!
> 
> Could you try running:
> bin/signserver getstatus brief all
> 
> And see what the output is regarding your pdf worker.
> 
> Regards,
> Marcus Lundblad
> 
>> Thanks a lot !
>>
>> --
>> Antoine Louiset
>>
>>
>> ------------------------------------------------------------------------------
>> October Webinars: Code for Performance
>> Free Intel webinars can help you accelerate application performance.
>> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
>> the latest Intel processors and coprocessors. See abstracts and register >
>> http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
>> _______________________________________________
>> SignServer-develop mailing list
>> Sig...@li...
>> https://lists.sourceforge.net/lists/listinfo/signserver-develop

-- 
Antoine Louiset