October 2009 - Pki-users - Dogtag Pki List Archives

Connections between the subsystems (CS 8.0 question)

by Veale, Sean

Hi, For interprocess communications between the subsystems in a security domian(I.e. between the tps and ca for example) is ssl turned on by default? If so just Sever auth? If not can this be configured for each of the subsystems? (CA,DRM,TPS and TKS?) Thnaks Sean

13 years, 5 months

2
2
0 / 0

Internal ocsp CS 8.0 question

by Veale, Sean

For 8.0 at least is there always an internal ocsp service setup at http://fqdn:9180/ca/ocsp where fqdn is the fully qualified domain name of the box the ca is sitting on? thanks Sean

13 years, 5 months

2
1
0 / 0

OpenSSL user certificates with DogTag

by Mike Mercier

Hello, I have some questions someone can hopefully answer. I would like to be able to create a user key pair using OpenSSL and then sign the public key with DogTag. I know you can create user keys with using a browser, but this is *not* what I am looking for. 1. Is this possible? 2. If possible, what template should be used for the request? Thanks, Mike

13 years, 5 months

2
1
0 / 0

cloning of PKI-CA

by Heyden, Klaus (Allianz ASIC SE)

Hello, i have propblems cloning an CA. The import of the keys failed. First when adding the filename the servlet every time adds the path "/usr/lib/<instance-name>/alias. I put the PKCS12 file directy in the alias-directory and changed the owner to pkiuser, the i get an error "missing permissions". in debug-log: [09/Oct/2009:15:55:04][http-9445-Processor22]: panel no=5 [09/Oct/2009:15:55:04][http-9445-Processor22]: panel name=restorekeys [09/Oct/2009:15:55:04][http-9445-Processor22]: total number of panels=19 [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet: process [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet:service() uri = /ca/admin/console/config/wizard [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet::service() param name='__password' value='(sensitive)' [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet::service() param name='path' value='master.p12' [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet::service() param name='p' value='5' [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet::service() param name='op' value='next' [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet: op=next [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet: size=19 [09/Oct/2009:15:55:25][http-9445-Processor24]: WizardServlet: in next 5 [09/Oct/2009:15:55:25][http-9445-Processor24]: panel no=5 What is going wron Kind regards, Klaus Heyden E-Mail Klaus.Heyden(a)Allianz.com<mailto:Klaus.Heyden@Allianz.com>

13 years, 5 months

2
1
0 / 0

Authentication using ldap

by Rashmi Pawar

Hi, I have installed and configured the pki subsytems. I need to configure it for user authentication using fedora directory server installed on the same system. However in current environment all the user information is stored on Windows Active Directory server and also the authentication is being done by existing Windows AD server. In the console for administrator configuration: #pkiconsole https: server.example.com:9445/ca I searched if i could enter the information of the AD server (that holds user information, that checks if user is valid) in "Authentication" section of the console but did not find one. I need to provide Windows ADS information in the authentication section of console, where do I provide the same?, or is there any other way for authenticating users as the user information is based on another system (Windows AD Server)? Thanks Rashmi

13 years, 5 months

3
4
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-users October 2009