January 2012 - Pki-users - Dogtag PKI List Archives

Re: [Pki-users] Pki-users Digest, Vol 46, Issue 4
by Dan Whitmire 25 Jan '12

25 Jan '12

On 01/23/2012 11:00 AM, pki-users-request(a)redhat.com wrote: > Send Pki-users mailing list submissions to > pki-users(a)redhat.com > > To subscribe or unsubscribe via the World Wide Web, visit > https://www.redhat.com/mailman/listinfo/pki-users > or, via email, send a message with subject or body 'help' to > pki-users-request(a)redhat.com > > You can reach the person managing the list at > pki-users-owner(a)redhat.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Pki-users digest..." > > > Today's Topics: > > 1. Re: VelocityServlet: Error processing the template (Marc Sauton) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 23 Jan 2012 08:42:34 -0800 > From: Marc Sauton<msauton(a)redhat.com> > To: Dan Whitmire<dan.whitmire(a)sonshineaccess.com> > Cc: pki-users(a)redhat.com > Subject: Re: [Pki-users] VelocityServlet: Error processing the > template > Message-ID:<4F1D8DFA.2010805(a)redhat.com> > Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" > > On 01/21/2012 10:02 AM, Dan Whitmire wrote: >> Has anyone received the error "VelocityServlet: Error processing the >> template" when configuring the TKS subsystem? I'm on Fedora 15 using >> Firefox 9. Am I missing something or is something not up and >> running? Thanks for any assistance. >> >> >> _______________________________________________ >> Pki-users mailing list >> Pki-users(a)redhat.com >> https://www.redhat.com/mailman/listinfo/pki-users > Yes, but this is a somehow generic message, this does not tell much, > could be key size mismatch, or hash, hw token, client or server > libraries, or other. > You may want to post here sanitized output of the matching catalina.out > and debug logs when this is happening, if possible. > Which step of the TKS configuration are you in when this is happening? > Thanks, > M. >

1 0

Usage Clarification
by Nathanael D. Noblet 24 Jan '12

24 Jan '12

Hello, So I'm rather new to pki-dogtag. I've installed it on a VM to try out since we are developing a product that requires a number of certificates but none of them need to be signed by a trusted browser CA like verisign. We currently are using puppet and func which generate their own certificate requests and get signed by system that has generated its own certificate. We are also looking at issuing certificates for systems like yum to retrieve updates from servers which would also check for client certificates etc. This brings me to my two questions. #1 - given the above, is dog tag able to deal with these certificates (I am so far under the impression that indeed it can) #2 - How does one request a certificate from the installed pki-ca? Reading http://tinyurl.com/7vujpqa [1] implies that the system/person requesting a certificate would submit some form of authentication. Whether this be LDAP, PIN-based or certificate based. Can I not simply have the certificate manager tell me of pending certificate requests? I don't expect any device to request a certificate without me knowing it needs one an initiating the process somehow, so the added authentication seems un-needed in my case. At the moment I'm used to puppet or func you have a puppetca function that can tell me the certificate signing requests pending approval, is this workflow fundamentally different than dogtag? [1] http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/7.3/html/Admin… -- Nathanael d. Noblet t 403.875.4613

5 8

VelocityServlet: Error processing the template
by Dan Whitmire 23 Jan '12

23 Jan '12

Has anyone received the error "VelocityServlet: Error processing the template" when configuring the TKS subsystem? I'm on Fedora 15 using Firefox 9. Am I missing something or is something not up and running? Thanks for any assistance.

2 1

AUTO: Barry Jelbert is out of the office (returning 30/01/2012)
by barry.jelbert＠solnetsolutions.co.nz 19 Jan '12

19 Jan '12

I am out of the office until 30/01/2012. During this time, please contact either the Support team (support(a)solnetsolutions.co.nz) or Stewart Gebbie (stewart.gebbie(a)solnetsolutions.co.nz) Note: This is an automated response to your message "Pki-users Digest, Vol 46, Issue 1" sent on 20/01/2012 8:46:55 a.m.. This is the only notification you will receive while this person is away. Attention: This email may contain information intended for the sole use of the original recipient. Please respect this when sharing or disclosing this email's contents with any third party. If you believe you have received this email in error, please delete it and notify the sender or postmaster(a)solnetsolutions.co.nz as soon as possible. The content of this email does not necessarily reflect the views of Solnet Solutions Ltd.

1 0