Re: [Pki-users] Problems with Dogtag and CA cert signed by External CA

Hi all, A helpful fellow called alee on #dogtag-pki suggested I write the list. I've been playing with dogtag-pki-9.0.0-10 on 64-bit Fedora 17. I'm looking to use dogtag to run a subordinate CA that does all our everyday PKI stuff. So when I used pki-create and went into the webform, I went the "create a csr" route and signed it using a root CA I'd set up using openssl. Everything seemed to work out fine, until I got to the point where I was restarting pki-cad (using systemctl restartpki-cad(a)pki-ca.service). It wouldn't start. With alee's help I tracked it down to a failure of SystemCertsVerification during the selftests. He asked me to submit my debug log to the list, so here it is. Cheers, DMK