On Thu, 2008-11-13 at 17:46 -0800, Marc Sauton wrote:
Graham Jenkins wrote:
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide certificates in response to requests from a SLCS server. .. What are the DogTag logs like? I would try /ca/ee/ca/profileSubmitCMCSimple .. There is a profileSubmitCMCFull if using client auth ..
Thanks Marc. Both of these give a similar response, with the DogTag logs showing something like: -- 14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: profileId caSimpleCMCUserCert [14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: authenticator not found [14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmistServlet: set Inputs into Context [14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: set sslClientCertProvider [14/Nov/2008:13:19:07][http-9443-Processor23]: xx Start parsePKCS10 LS12VWxXZHZWNHAxT .. ZFlCODANCi0tdlVsV2R2VjRwMU1vdGlmQTg2OHE5dzZ5eXk2TTRvLS0NCg== [14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10: signature verification enabled [14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10 setting thread token [14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10 java.io.IOException: Sequence tag error 45 Any ideas from this?
There is also a tool called HttpClient for tests: http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tools_G...
Trying to make sense of this now, not getting very far. :( -- Graham Jenkins Australian Research Collaboration Service Victorian Partnership for Advanced Computing (+613) 9925-4862