[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [Pki-devel] pki-dogtag operation(ca , subca)



Yes,
Since you have two CA instances running on the same machine, you should select the relevant Administrator certificate.
In your browser select the option "Ask me every time" in the question "When a server request my personal certificate". Then select the relevant certificate for the relevant CA instance.


2011/1/13 RD WoSign <rd wosign com>
Hi,
   Sorry,  I've found a the way to solve the problem, Login in adminitrator console view the log, find that my choose's certificate is not Credential, if we choose another Credential certificate, the system is normal.
  
thanks all,

  Best Regards,
   jeff


在 2011年1月13日 上午10:31,RD WoSign <rd wosign com>写道:

hi,all,
      I have installed Dogtag Certificate System by pki_install_guide,include ca, subca, kra, ocsp,tks,ra and tps,  configure is finished.
i have problem in using the Dogtag Certificate Sytem, there many main requestes follow.
     note: my test domain is wotest.com   , operate platform is fedora 13
     1. after pkicreate and configure,Enrollment Certificate  by URL https://wotest.com:9444/ca/ee/ca/  and Issue Certifite  are OK,
but i access subca  Agent Service, can't fetch the subca's Certificate Enrollment  submited by SSL END USER SERVICES(https://wotest.com:9544/ca/ee/ca/).
Subca's Agent Service Click List Requests  display :
Problem Processing Your Request

The Certificate Manager encountered an unexpected error while processing your request. The following is a detailed message of the error that occurred.

Invalid Credential.

Please consult your local administrator for further assistance. The Certificate System logs may provide further information.


 2.  if I restart fc13 and execute the "service pki-cad start " ,display:
    pki-ca (pid 3386) is running ...

    Unsecure Port       = http://wotest.com:9180/ca/ee/ca
    Secure Agent Port   = https://wotest.com:9443/ca/agent/ca
    Secure EE Port      = https://wotest.com:9444/ca/ee/ca
    Secure Admin Port   = https://wotest.com:9445/ca/services
    EE Client Auth Port = https://wotest.com:9446/ca/eeca/ca
    PKI Console Port    = pkiconsole https://wotest.com:9445/ca

    Tomcat Port         = 9701 (for shutdown)

    PKI Instance Name:   pki-ca

    PKI Subsystem Type:  Root CA (Security Domain)

    Registered PKI Security Domain Information:
    ==========================================================================
    Name:  wotest
    URL:   https://wotest.com:9445
    ==========================================================================

[root woto jeff]# service pki-cad start pki-subca
Starting pki-subca:
                                                           [确定]

pki-subca (pid 4341) is running ...

    Unsecure Port       = http://wotest.com:9580/ca/ee/ca
    Secure Agent Port   = https://wotest.com:9543/ca/agent/ca
    Secure EE Port      = https:/wotest.com:9544/ca/ee/ca
    Secure Admin Port   = https://wotest.com:9545/ca/services
    EE Client Auth Port = https://wotest.com:9546/ca/eeca/ca
    PKI Console Port    = pkiconsole https://wotest.com:9545/ca
    Tomcat Port         = 9801 (for shutdown)

    PKI Instance Name:   pki-subca

    PKI Subsystem Type:  Subordinate CA

    Registered PKI Security Domain Information:
    ==========================================================================
    Name:  wotest
    URL:   https://wotest.com:9445
    ==========================================================================

  
   if i access Agent Services in CA or SUBCA, Click List Requests  display :
Problem Processing Your Request

The Certificate Manager encountered an unexpected error while processing your request. The following is a detailed message of the error that occurred.

Invalid Credential.

Please consult your local administrator for further assistance. The Certificate System logs may provide further information.


So, we can't go on, please tell me what's the problem, and how to   do?
    thanks a lot.

    --
    Best Regards,
    jeff

  




_______________________________________________
Pki-devel mailing list
Pki-devel redhat com
https://www.redhat.com/mailman/listinfo/pki-devel




--
Best Regards,
Harshana



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]