Pki-users August 2014

users@lists.dogtagpki.org

3 participants
3 discussions

by Elliott William C OSS sIT

Hi all, Can Dogtag (in this case v. 9.0.3-30.el6 ) be coerced into accepting base64-encoded CMC requests? Is there a parameter somewhere? Or would it require reprogramming? We have a (smart-)card management system (runs under Windows) which sends the requests and expects the responses to both be base64 encoded. Thanks and best regards, William Elliott s IT Solutions Open System Services

8 years, 5 months

4
6
0 / 0

(SOLVED) Error "A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider"

by Ricardo Alexander Perez Ricardez

When I try to import a certificate, I get the following error: VBScript Error in InstallResponse. Error Number 800B0109 ocurred.CertEnroll::InstallResponse: Se procesó correctamente una cadena de certificados, pero termina en un certificado de raíz no compatible con el proveedor de confianza. 0x800b0109 (-2146762487) VBScript Error in InstallResponse. Error Number 800B0109 ocurred.CertEnroll::InstallResponse: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. 0x800b0109 (-2146762487) SOLUTION: Make sure that the root certificate is installed in the trusted root store. You also might have to make sure any intermediate certificates are installed in the intermediate store. Some references: http://www.networksteve.com/forum/topic.php/A_certificate_chain_processed,_b ut_terminated_in_a_root_certific/?TopicId=14617&Posts=2 https://www.vandyke.com/products/vshell/docs/windows/Use_X.509_Certificates. htm http://technet.microsoft.com/es-ES/library/bb331963(v=exchg.141).aspx http://support.microsoft.com/kb/2078942 http://support.microsoft.com/default.aspx?scid=kb;EN-US;945121 https://ninite.com/help/errors/revocation.html

10 years, 3 months

1
0
0 / 0

Update CA name "CA Signing Certificate" to a more meaninful name

by Ricardo Alexander Alexander Perez Ricardez

Hi, I create a CA in Interactive way, with default values: pkispawn use this file: etc/pki/default.cfg This file contains the value: pki_ca_signing_subject_dn=cn=CA Signing Certificate,o=%(pki_security_domain_name)s Therefore, the CA is created with the default value: "CA Signing Certificate" I would change this to a more meaningful name, It’s possible update or change the name “CA Signing Certificate” to a new value name? pkispawn use argument -u "update instance of specified subsystem", It's possible to update the value using this option?

10 years, 4 months

3
2
0 / 0

← Newer
1
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-users August 2014