Problems with Dogtag and CA cert signed by External CA
by Dwayne MacKinnon
Hi all,
A helpful fellow called alee on #dogtag-pki suggested I write the list. I've
been playing with dogtag-pki-9.0.0-10 on 64-bit Fedora 17.
I'm looking to use dogtag to run a subordinate CA that does all our everyday
PKI stuff. So when I used pki-create and went into the webform, I went the
"create a csr" route and signed it using a root CA I'd set up using openssl.
Everything seemed to work out fine, until I got to the point where I was
restarting pki-cad (using systemctl restart pki-cad(a)pki-ca.service). It
wouldn't start.
With alee's help I tracked it down to a failure of SystemCertsVerification
during the selftests.
He asked me to submit my debug log to the list, so here it is.
Cheers,
DMK
12 years
ESC issues
by Pascal Jakobi
After struggling a bit with my system, I managed to launch the ESC with a
french Gemalto Smart Card & reader.
Here is what happens.
First I see a notification pop-up that tells me :
Can't get UniversalXPConnect.TypeError: Components.classes['@
redhat.com/rhCoolKey;1'] is undefined
Then when hitting "diagnostics", I get the following.
SMART CARD DIAGNOSTICS REPORT
***Software Version Information***
Smart Card Manager Version: null
System Versions: mozilla/5.0 (x11; linux i686; rv:16.0) gecko/20100101
esc/1.1.0-16
***Active Smart Card Details***
Number of Smart Cards Detected: 0
***Smart Card Activity***
No log file or log file has no data.
Can someone tell me what all this means (probably that the reader or card
is unsupported), however...
Thanks
P
12 years, 2 months
