#995 Unable to Request SSL Client Certificate

[Anonymous]

Hi,

When I visit:

https://myserver.net:10000/acl/cert_form.cgi

The page loads correctly, but the 'Loading...' box is
never populated with CSP details. The page finishes
loading, but on submitting (in IE6), a script error occurs
(obviously because I can't select a CSP!):

Line: 100
Char: 3
Error: Object doesn't support this property or method:
'Enroll.RequestStoreFlags'
Code: 0

SSL and all that jazz is fine at the server end, so I
guess there's a problem with my local CSPs?

[Kai Schätzl]

Logged In: YES
user_id=280841

Jamie, just tested this with 1.080, although there's nothing
about it in the change log. I can go as far as importing the
cert. When I want to import I get the VBScript error "Could
not insert the PKCS7 envelope". I'm running Windows XP Pro
with latest updates. Do you store the cert on disk, so I could
have a look at it and compare with others?

[Jamie Cameron]

Logged In: YES
user_id=129364

If you do a 'view source', it should appear in the XXX part
of the :
<input type="hidden" name="result" value="XXX">
line.

[Kai Schätzl]

Logged In: YES
user_id=280841

Yes, I found that. If I save this to a .p7b file, I can import it,
but it goes to "Other People" and is not available when I want
to login. I assume it should go to "Personal"? But I made a
mistake in the beginning. I accidentally pasted in the
certificate I use for miniserv.pem and not the CA certificate
itself. So I started over and copied in the CA cert and its
private key and saved it. However, when I'm now at the
creation/importing stage when Webmin is actually creating
the cert it hangs. I see a perl process growing very large (200
MB), so that I killed it before it could wreak any havoc. I also
see yes running. I tried on two machines (Suse 8.0) and both
show this symptom. Either there is a bug somewhere or I'm
doing something wrong.

[Kai Schätzl]

Logged In: YES
user_id=280841

I tried now the same with Mozilla 1.2 on Windows. Perl
doesn't error out, but I get this error

Using configuration from /etc/webmin/acl/openssl.cnf
Enter PEM pass phrase:
unable to load CA private key
18918:error:0906406D:PEM
routines:DEF_CALLBACK:problems getting
password:pem_lib.c:114:
18918:error:0906A068:PEM routines:PEM_do_header:bad
password read:pem_lib.c:430:

I had a look in the openssl.cnf you use and decided to
replace it with my own which I use for signing our ssl certs
for web servers. After adjusting the relative paths in there I
get the exact same error.