August 2010 - Pki-devel - Dogtag PKI List Archives

"PKI Subsystem Configuration" help (RD@WoSign)
by wosign .cn 16 Aug '11

16 Aug '11

Hi, all, I am trying to install Dogtag Certificate System, but at the "PKI Subsystem Configuration", we have the problem at step: "Creat e a New Securit y Domain", whatever we enter, it display error "$errorString", and if we choose the "*Join an Existing Security Domain *", it display error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments. Maybe some components or configure is error, but I setup and configure pki subsystem(include Requirements and runtime tool) by the site: http://pki.fedoraproject.org/wiki/PKI_Install_Guide , the infomation of my configure and environment: hostname: wotestca.com step 1: ============================================================ Starting pki-ca: [OK] pki-ca (pid 2817) is running ... 'pki-ca' must still be CONFIGURED! (see /var/log/pki-ca-install.log) Before proceeding with the configuration, make sure the firewall settings of this machine permit proper access to this subsystem. Please start the configuration by accessing: https://wotestca.com :9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSpJg6Qz<https://wosignfedora:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSp…> After configuration, the server can be operated by the command: /sbin/service pki-cad restart pki-ca ------------------------------------------------------------------------------------------------------------------------ step 2: open : "https://wotestca.com :9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSpJg6Qz<https://wofedora:9445/ca/admin/console/config/login?pin=HPQkcbu71yCYkSpJg6Qz> " to CA Setup Wizard step 3: choose* "Create a New Security Domain", * enter " testwosecdomain" and click "NEXT>" button, return errror"Invalid characters found in Security Domain Name testwosecdomain. Valid characters are A-Z, a-z, 0-9, dash and space" choose "*Join an Existing Security Domain *" , if enter "https://wotestca.com:9445 <https://wofedora:9445/>" return error "org.xml.sax.SAXParseException: The string "--" is not permitted within comments" if enter" https://wotestca.com:9443" or " https://wotestca.com:9446" return error "Illegal SSL Admin HTTPS url value for the security domain " check the directory server: #service dirsrv status #dirsrv testca (pid 3342) is running...... So, we can't go on, please tell me what's the problem, and how to do? thanks a lot. -- Best Regards, jeff

2 1

NOTICE: Dogtag Subversion Repositories have moved from 'pki.fedoraproject.org' to 'fedorahosted.org'
by Matthew Harmsen 13 Aug '10

13 Aug '10

Everyone, The Dogtag "pki" and "tomcatjss" subversion source repositories that were originally hosted on 'pki.fedoraproject.org' have been moved to 'fedorahosted.org'. The URLs referenced below provide check-out details for these new repositories: * http://pki.fedoraproject.org/wiki/PKI_Subversion_Instructions (pki) * http://pki.fedoraproject.org/wiki/PKI_Pre-Built_Support_Components (tomcatjss) STEP 1: Anyone working with these repositories will need to check out ALL of the brand "new" repos (notice the "new" syntax for these URLs): * svn co http://svn.fedorahosted.org/svn/pki/trunk/pki pki * svn co http://svn.fedorahosted.org/svn/tomcatjss/trunk/tomcatjss tomcatjss STEP 2: You will then need to "move" any changes from any "old" trees that you have to the "new" trees that you have created in STEP 1 above. Since the "old" repositories will be left running for the next week or two, it is recommended that you first perform an "svn update" on any "old" trees to iron out any conflicts prior to moving your changes to the "new" tree. For example: * cd tomcatjss; svn update * cd pki; svn update The Dogtag Wiki as well as the PKI and TOMCATJSS source tarballs will remain located at 'pki.fedoraproject.org'. Thanks, -- Matt NOTE: As a part of this migration, ALL Dogtag and tomcatjss packages have been increased from version 1.3 to 2.0 (in preparation of future planned changes to the Dogtag code base), so if you are building directly from subversion source (rather than using the Dogtag 1.3 SRPMS), then you may wish to use the following UNSUPPORTED BRANCH URLs instead: * svn co http://svn.fedorahosted.org/svn/pki/branches/DOGTAG_1_3_FREEIPA_v2_BRANCH/p… pki * svn co http://svn.fedorahosted.org/svn/tomcatjss/branches/DOGTAG_1_3_FREEIPA_v2_BR… tomcatjss

1 1

Re: [Pki-devel] NOTICE: Dogtag Subversion Repositories have moved from 'pki.fedoraproject.org' to 'fedorahosted.org'
by Matthew Harmsen 13 Aug '10

13 Aug '10

On 08/13/10 09:42, Kaspar Brand wrote: > Matt, > > >> STEP 1: Anyone working with these repositories will need to check out >> ALL of the brand "new" repos (notice the "new" syntax for these URLs): >> > Are you aware of svn's "switch" command? I think it would be much > less of a hassle if you just point people to use > > svn switch --relocate https://pki.fedoraproject.org/svn/pki http://svn.fedorahosted.org/svn/pki > > No need to "move" local changes etc. - simply keep your existing > checkout, and let svn do the rest with all the .svn/entries :-) > > Regards, > Kaspar > Kaspar, I was not aware of this option --- thanks! I have documented the use of this option at http://pki.fedoraproject.org/wiki/PKI_Subversion_Instructions. Thanks again! -- Matt

1 0

pki-common-1.3.5: test fails
by Alexander V Vershilov 03 Aug '10

03 Aug '10

I'm trying to build next packages on Gentoo Linux. I try to build pki-common-1.3.7 everything is ok but if I try to make ant verify I have next errors: compile_junit_tests: [echo] Compiling 'pki-common' junit tests from 'test' into 'build/testcases' ... [javac] Compiling 21 source files to /var/tmp/portage/app-pki/pki-common-1.3.7/work/pki-common-1.3.7/build/testcases [javac] /var/tmp/portage/app-pki/pki-common-1.3.7/work/pki-common-1.3.7/test/com/netscape/certsrv/app/CMSEngineDefaultStub.java:48: com.netscape.certsrv.app.CMSEngineDefaultStub is not abstract and does not override abstract method getEEClientAuthSSLPort() in com.netscape.certsrv.apps.ICMSEngine [javac] public class CMSEngineDefaultStub implements ICMSEngine { [javac] ^ [javac] /var/tmp/portage/app-pki/pki-common-1.3.7/work/pki-common-1.3.7/test/com/netscape/cmscore/dbs/DBSubsystemDefaultStub.java:17: com.netscape.cmscore.dbs.DBSubsystemDefaultStub is not abstract and does not override abstract method setEnableSerialMgmt(boolean) in com.netscape.certsrv.dbs.IDBSubsystem [javac] public class DBSubsystemDefaultStub implements IDBSubsystem { [javac] ^ [javac] Note: /var/tmp/portage/app-pki/pki-common-1.3.7/work/pki-common-1.3.7/test/com/netscape/cmscore/request/RequestDefaultStub.java uses or overrides a deprecated API. [javac] Note: Recompile with -Xlint:deprecation for details. [javac] Note: Some input files use unchecked or unsafe operations. [javac] Note: Recompile with -Xlint:unchecked for details. [javac] 2 errors There was such a error in pki-common-1.3.1 but moving to 1.3.7 helps but problems in test still left. // So maybe test is not up to date I have next packages installed /that can be related to this error/ dev-java/ldapsdk-4.1.7-r3 dev-java/osutil-1.3.1 app-crypt/pki-symkey-1.3.2 app-pki/pki-util-1.3.1 I'm not posting it directly to bugzilla because I'm not using fedora rpms. -- Alexander V Vershilov.

1 0