I'm trying to install OpenSCEP on Fedora 8, in addition to the PKI. I
can't compile the sources due to an BER library error: "BER library
not found". Do you have any idea ? Did somebody experience
successfully OpenSCEP ?
I'm trying to setup a Dogtag Certificate System.
No problem to setup CA and OCSP in the same machine, but If I try to deploy
OCSP on other machine I always get stalled in the same part of the
configuration process: "Subject Names". There, I leave the default values of
"OCSP Signing Certificate", "SSL Server Certificate" and "Subsystem
Certificate" or even I change to other values. I pass to next step and setup
the Admin password and finally the wizard come back to "Subject Names"
screen, it's a endless process.
In "catalina.out" file always appears:
"Exception caught: java.io.IOException: Error: remote certificate is null"
So it seems to be that OCSP doesn't received a certificate from CA. I have
searched on Google but I can't find anything to end the OCSP process
successfully. Does anybody known what it's happening with OCSP?
I'm trying out to set up dogtag. i've been able to install everything but
I'm struggling on RA while after configuring it, i can just go through the
SSL End Users Services and neither the Agent Services nor Administrator
Services. I always got the following error:
"You are not authorized to access the requested page.
Error. Authentication Error"
Looks like something wrong with the certificate. Do somebody already
experienced this before ?
BTW, when i'm trying to start the TPS module, evrything seems fine but i got
this error and it's impossible to connect to the module to configure it
via the web browser:
"Starting pki-tps: /bin/bash: line 1: 23817 Segmentation fault
/usr/sbin/httpd.worker -f /etc/pki-tps/https.conf"
The "livecd-iso-to-disk" command appears to work OK when loading Fedora9
on-to a USB thumb-drive with "persistence" option (with an
appropriately sized overlay - I used 1 GBY overlay). Custom changes to
file-system and installation of new applications appears to survive
subsequent reboot sessions.
However, while attempting to install the DogTag system on the
"persistent" USB, I run unto trouble getting the Directory Server to
startup properly. The log-file indicates the configuration session went
OK - but the resulting instance does not start (or remain on running
state) - the log-file does not indicate any errors!
Have anyone on the list been successful getting the Directory Server
(and DogTag PKI) to install on a "persistent" live USB? I am using
fedora9 version 2.6.25-14.fc9.i686 - downloaded a few days ago. Any
comments & suggestions appreciated!
E. Hansen @ SPYRUS