July 2010 - Pki-devel - Dogtag PKI List Archives

"PKI Subsystem Configuration" help (RD@WoSign)
by wosign .cn 16 Aug '11

16 Aug '11

Hi, all, I am trying to install Dogtag Certificate System, but at the "PKI Subsystem Configuration", we have the problem at step: "Creat e a New Securit y Domain", whatever we enter, it display error "$errorString", and if we choose the "*Join an Existing Security Domain *", it display error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments. Maybe some components or configure is error, but I setup and configure pki subsystem(include Requirements and runtime tool) by the site: http://pki.fedoraproject.org/wiki/PKI_Install_Guide , the infomation of my configure and environment: hostname: wotestca.com step 1: ============================================================ Starting pki-ca: [OK] pki-ca (pid 2817) is running ... 'pki-ca' must still be CONFIGURED! (see /var/log/pki-ca-install.log) Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem. Please start the configuration by accessing: https://wotestca.com :9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSpJg6Qz<https://wosignfedora:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSp…> After configuration, the server can be operated by the command: /sbin/service pki-cad restart pki-ca ------------------------------------------------------------------------------------------------------------------------ step 2: open : "https://wotestca.com :9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSpJg6Qz<https://wofedora:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSpJg6Qz> " to CA Setup Wizard step 3: choose* "Create a New Security Domain", * enter " testwosecdomain" and click "NEXT>" button, return errror"Invalid characters found in Security Domain Name testwosecdomain. Valid characters are A-Z, a-z, 0-9, dash and space" choose "*Join an Existing Security Domain *" , if enter "https://wotestca.com:9445 <https://wofedora:9445/>" return error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments" if enter" https://wotestca.com:9443" or " https://wotestca.com:9446" return error "Illegal SSL Admin HTTPS url value for the security domain " check the directory server: #service dirsrv status #dirsrv testca (pid 3342) is running...... So, we can't go on, please tell me what's the problem, and how to do? thanks a lot. -- Best Regards, jeff

2 1

problem compiling pki-utils
by Alexander V Vershilov 31 Jul '10

31 Jul '10

Hello. I'm trying to build pki-utils on my Gentoo linux. And I cannot compile pki-utils because I'm getting error: [javac] /var/tmp/portage/app-pki/pki-util-1.3.1/work/pki-util-1.3.1/src/com/netscape/cmsutil/crypto/CryptoUtil.java:155: cannot find symbol [javac] symbol : class Usage [javac] location: class org.mozilla.jss.crypto.KeyPairGeneratorSpi [javac] org.mozilla.jss.crypto.KeyPairGeneratorSpi.Usage[] usage_mask) So I see that you have used special jss version with additional classes such as Usage class. I want to ask where could I get pathes from? Or maybe I've done something wrong. I've taken pki from: http://pki.fedoraproject.org/pki/sources/pki-util/pki-util-1.3.1.tar.gz and used jss-4.3 from: cvs-mirror.mozilla.org -- Best regards Alexander V Vershilov

2 2

Re: [Pki-devel] "PKI Subsystem Configuration" help (RD@WoSign)
by Kashyap Chamarthy 19 Jul '10

19 Jul '10

(adding list) On 07/19/2010 02:01 PM, RD@WoSign wrote: > kashyap, > Thank you for help.I have tried serval times by your advises on > fedora12 or fedora13,but still failed. > Install Dogtag Certificate System on fedora12, if I choose "Create a New > Security Domain",whatever we enter, there is nothing to display, > if choose "Join an Existing Security Domain ",it display error > "org.xml.sax.SAXParseException: The string "--" is not permitted > within comments. I'm not sure, why you're hitting that message if you're using a domain name with valid sane characters. As I mentioned earlier, it works perfectly fine for me with exact security domain name as yours on Fedora12. > > There are also several doubts at the installation process: > 1. On fedora 12, download the Binary Packages of Dogtag > Certificate System 1.3 and later, include header(dir),repodata(dir) and > *.rpm, but i don't known how to use. Dogtag Certificate system 1.3 onwards, is now included in the Fedora repositories. So, binary packages download is not necessary. > 2. if i install the dogtag-pki, the SubSystem(pki-ca pki-kra and so > on) will be setup, Both methods are equivalent? Yes, On a clean machine, installing 'dogtag-pki' should give you all subsystems. (dogtag-pki is a meta package which will install all the required components) ----- # yum install dogtag-pki ----- /kashyap > Look forward to your help, > jeff > > 2010/7/13 Kashyap Chamarthy <kchamart(a)redhat.com > <mailto:kchamart@redhat.com>> > > On 07/13/2010 08:06 AM, RD@WoSign wrote: > > Hi, all, > I am trying to install Dogtag Certificate System, but at the > "PKI > Subsystem Configuration", we have the problem at step: "Creat e > a New > Securit y Domain", whatever we enter, it display error > "$errorString", > and if we choose the "*Join an Existing Security Domain *", it > display > error "org.xml.sax.SAXParseException: The string "--" is not > permitted > within comments. > Maybe some components or configure is error, but I setup and > configure > pki subsystem(include Requirements and runtime tool) by the > site:http://pki.fedoraproject.org/wiki/PKI_Install_Guide , > > the infomation of my configure and environment: > > hostname: wotestca.com <http://wotestca.com/> > <http://wotestca.com <http://wotestca.com/>> > > step 1: > ============================================================ > Starting pki-ca: [OK] > pki-ca (pid 2817) is running ... > 'pki-ca' must still be CONFIGURED! > (see /var/log/pki-ca-install.log) > Before proceeding with the configuration, make sure > the firewall settings of this machine permit proper > access to this subsystem. > Please start the configuration by accessing: > https://wotestca.com:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSp… > After configuration, the server can be operated by the command: > /sbin/service pki-cad restart pki-ca > ------------------------------------------------------------------------------------------------------------------------ > > step 2: > open : > "https://wotestca.com:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSp…" > to CA Setup Wizard > > step 3: > choose "Create a New Security Domain", enter " > testwosecdomain" > and click "NEXT>" button, > > > I tried same value you used above (_without_ the double quotes) on > Fedora-12 for a 'New Security domain' and I was able to proceed > perfectly fine. > > > return errror"Invalid characters found in Security Domain Name > testwosecdomain. Valid characters are A-Z, a-z, 0-9, dash and space" > > > This clearly mentions what characters are 'valid'. Maybe you want to > double-check that you're not inadvertently entering invalid > characters(like ""). > > hope that helps, > > /kashyap > > > > > choose "Join an Existing Security Domain " , > if enter "https://wotestca.com:9445 <https://wotestca.com:9445/> > <https://wotestca.com:9445/>" > > return error "org.xml.sax.SAXParseException: The string "--" is not > permitted within comments" > > if enter" https://wotestca.com:9443 <https://wotestca.com:9443/> > <https://wotestca.com:9443/>" or " > https://wotestca.com:9446 <https://wotestca.com:9446/> > <https://wotestca.com:9446/>" > > return error "Illegal SSL Admin HTTPS url value for the security > domain " > > > check the directory server: > #service dirsrv status > #dirsrv testca (pid 3342) is running...... > > So, we can't go on, please tell me what's the problem, and how > to do? > thanks a lot. > > -- > Best Regards, > jeff > > > > _______________________________________________ > Pki-devel mailing list > Pki-devel(a)redhat.com <mailto:Pki-devel@redhat.com> > https://www.redhat.com/mailman/listinfo/pki-devel > > >

1 0

"PKI Subsystem Configuration" help (RD@WoSign)
by RD＠WoSign 13 Jul '10

13 Jul '10

Hi, all, I am trying to install Dogtag Certificate System, but at the "PKI Subsystem Configuration", we have the problem at step: "Creat e a New Securit y Domain", whatever we enter, it display error "$errorString", and if we choose the "*Join an Existing Security Domain *", it display error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments. Maybe some components or configure is error, but I setup and configure pki subsystem(include Requirements and runtime tool) by the site: http://pki.fedoraproject.org/wiki/PKI_Install_Guide , the infomation of my configure and environment: hostname: wotestca.com step 1: ============================================================ Starting pki-ca: [OK] pki-ca (pid 2817) is running ... 'pki-ca' must still be CONFIGURED! (see /var/log/pki-ca-install.log) Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem. Please start the configuration by accessing: https://wotestca.com:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSp… After configuration, the server can be operated by the command: /sbin/service pki-cad restart pki-ca ------------------------------------------------------------------------------------------------------------------------ step 2: open : " https://wotestca.com:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSp… " to CA Setup Wizard step 3: choose "Create a New Security Domain", enter " testwosecdomain" and click "NEXT>" button, return errror"Invalid characters found in Security Domain Name testwosecdomain. Valid characters are A-Z, a-z, 0-9, dash and space" choose "Join an Existing Security Domain " , if enter "https://wotestca.com:9445" return error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments" if enter" https://wotestca.com:9443" or " https://wotestca.com:9446" return error "Illegal SSL Admin HTTPS url value for the security domain " check the directory server: #service dirsrv status #dirsrv testca (pid 3342) is running...... So, we can't go on, please tell me what's the problem, and how to do? thanks a lot. -- Best Regards, jeff

2 1

"PKI Subsystem Configuration" help
by RD＠WoSign 12 Jul '10

12 Jul '10

Hi, all, I am trying to install Dogtag Certificate System, but at the "PKI Subsystem Configuration", we have the problem at step: "Creat e a New Securit y Domain", whatever we enter, it display error "$errorString", and if we choose the "*Join an Existing Security Domain *", it display error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments." So, we can't go on, please tell me what's the problem, and how to do? thanks a lot. Best Regards, Jeff

2 2