January 2011 - Pki-users - Dogtag PKI List Archives

DogTAG PKI - crlDistributionPoints cert profile: Type_0 : URIName error
by Frederic d'Huart 28 Feb '11

28 Feb '11

Hello Pki users, Section B.1.4. of the RH admin guide refers to the following acceptable values for crlDistributionPoint Type: DirectoryName URIName RelativeToIssuer Using PKIConsole, I have added to the caUserCert profile a policy for include a CDP as follow: policyset.userCertSet.13.default.name=CRL Distribution Points Extension Default policyset.userCertSet.13.default.params.crlDistPointsCritical=false policyset.userCertSet.13.default.params.crlDistPointsEnable_0=true policyset.userCertSet.13.default.params.crlDistPointsPointType_0=URIName policyset.userCertSet.13.default.params.crlDistPointsPointName_0=http://xxx.xxx.xxx/crl/xxx.crl policyset.userCertSet.13.default.params.crlDistPointsReasons_0= after profile re-activated, and new request generated, I get the following error on the agent interface: The Certificate System has encountered an unrecoverable error. Error Message: /java.lang.ClassCastException: netscape.security.x509.Extension cannot be cast to netscape.security.x509.CRLDistributionPointsExtension/ Please contact your local administrator for assistance. Any Ideas what could be wrong ? Thank you.

4 8

Fedora 13 & 14 Dogtag packages Installer broken?
by Fabian Bertholm 31 Jan '11

31 Jan '11

Hi, I've tried a dogtag PKI installation on Fedora 13 and Fedora 14. Both do not start the web service for the install wizard on port 9445. During pkicreate there a a number of errors with tomcat5. Nowadays both install tomcat6. I guess there is something broken regardng the tomcat dependencies. When removing the upgrades repo on Fedora 13 and downgrading to tomcat5 it seems to work a little bit better. Greetings, Fabe

1 0

Active Directory computer and user templates for autoenrollment
by Andrey Voronin 17 Jan '11

17 Jan '11

Hi! Does somebody has such ready templates like for domain controller?

2 2