Hi,
I try to create a certificate by following these steps:
Some simple steps are listed here on how to proceed to enroll a server
certificate for an apache webserver with Dogtag.
*Generate a Key/CSR:
oopenssl genrsa -des3 -out
www.mydomain.com.key 1024
oopenssl req -new -key
www.mydomain.com.key -out
www.mydomain.com.csr
§Fill out all the prompts here including
CountryName,State,Locality,Organization Name, Organizational Unit
Name, Common Name.
*Sample CSR from the above commands:
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
*Submit this CSR to the "Server Certificate Enrollment" profile of the
Dogtag CA and get it approved.
*Download the Cert and the CA and get them installed in apache.
From this URL:
http://pki.fedoraproject.org/wiki/Apache_Cert_Enrollment
*The .key and .csr files correctly generated, when I get to this step:
*
*Submit this CSR to the "Server Certificate Enrollment" profile of the
Dogtag CA and get it approved.
*
*I get the following error in the web administration console DogTag:
*
*Sorry, your request is not submitted. The reason is "invalid request".*
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users The posted CSR seem to work ok
for me, can read it from openssl, request
and issue a certificate using RHCS 8.1.
You may want to review the /var/log/pki-ca/debug file for any extra hint.
Thanks,
M.