[Pki-users] 回复： 回复： 回复： "SecurityDomain HTTPSAdmin URL not found " (solved)

Hi Alee I take some time to debug the perl cgi. I found the error caused by decode method after I change it, it works. /sscep enroll -f sscep.conf -E 3des -S sha1 .... CN's of request and certificate matched! ./sscep: writing cert -----BEGIN CERTIFICATE----- MIIC8DCCAdigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBHMSQwIgYDVQQKExtsb2Nh bGRvbWFpbiBTZWN1cml0eSBEb21haW4xHzAdBgNVBAMTFkNBIFNpZ25pbmcgQ2Vy dGlmaWNhdGUwHhcNMTMwNTAyMTEwOTAwWhcNMTUwNDIyMTEwOTAwWjAXMRUwEwYD VQQDEwwxMC42NC43OS4yMzQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOAV TYAh2vWcLWys4AMGEs9qbUeg/IkG9R944fHnaR9+uwqA+cZVNwmOl/Qwvk3GINiS JQKlhR1wxf4AHeCACtfN7fk+ckjOngx+PN4GLGwZyTAPSWEFCK7vzGqrFWyqAibL eeKzhhXiWkoHqQYkOoboAKY2OEvHuwKDod5xT3q/AgMBAAGjgZowgZcwHwYDVR0j BBgwFoAUs0FtabRcZ2tq6VfsBCXKQKzoWsAwRQYIKwYBBQUHAQEEOTA3MDUGCCsG AQUFBzABhilodHRwOi8vbG9jYWxob3N0LmxvY2FsZG9tYWluOjgwODAvY2Evb2Nz cDAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwME MA0GCSqGSIb3DQEBCwUAA4IBAQBzRKjf0ebDVjhIOuYFhbE/Htful4oLtCcQI2sZ xjr9uWUITEVZNCWONUJ2pZKT+9KefE8zCjRd8tliyKjUZOO4VYpO+TDfe4KsQMSe 2Lrd35g35iUXOhqi2IVXLjQT6mdEWuYKwIGRl98pyoLMz9MZKbLdnrGkhYZHxA9n EMds+7VmYdw3orZDaD4UmMqZL6FfNazjTKK1VlOWDL75QeVGGv9lNXbWqB+EUAZp U0mc/dip2R3wZRwygHE7cKs/lvheI9GkoQYLSLWzKcS2M2JiSOiwrEfi+zMWF71O DRbD6S2b8tl8k/f9WCwgLgKisw3TKRyJV+FLb5LdapE7lMQi -----END CERTIFICATE----- ./sscep: certificate written as ./local.crt sorry , I didn't change the default value according to (http://pki.fedoraproject.org/wiki/SCEP_in_Dogtag#SSCEP_Configuration) Because first time I use firefox's keymanager. Thanks very much! sbaa ------------------ 原始邮件 ------------------ 发件人: &quot;骷髅猫&quot;&lt;sbaa(a)vip.qq.com&gt;; 发送时间: 2013年5月2日(星期四) 下午5:24 收件人: &quot;alee&quot;&lt;alee(a)redhat.com&gt;; 抄送: &quot;Pki-users&quot;&lt;Pki-users(a)redhat.com&gt;; 主题: 回复： 回复： 回复： [Pki-users] "SecurityDomain HTTPSAdmin URL not found " Hi Alee some update I try another scep client sscep (https://github.com/certnanny/sscep) got the same result: ./sscep: server returned status code 500 ./sscep: mime_err: HTTP/1.1 500 Internal Server Error Date: Thu, 02 May 2013 09:13:20 GMT Server: Apache Content-Length: 333 Connection: close Content-Type: text/html; charset=iso-8859-1 <h1>Software error:</h1> <pre>Could not find pkiclient.xml in /var/lib/pki-ra/docroot/ee/scep/ at /var/lib/pki-ra/docroot/ee/scep/pkiclient.cgi line 81. </pre> <p> For help, please send mail to the webmaster (<a href="mailto:you@example.com">you@example.com</a>), giving this error message and the time and date of the error. </p> ./sscep: wrong (or missing) MIME content type ./sscep: error while sending message I am not sure what version is stable and recommended. Thanks Sbaa ------------------ 原始邮件 ------------------ 发件人: &quot;骷髅猫&quot;&lt;sbaa(a)vip.qq.com&gt;; 发送时间: 2013年4月30日(星期二) 下午2:33 收件人: &quot;alee&quot;&lt;alee(a)redhat.com&gt;; 抄送: &quot;Pki-users&quot;&lt;Pki-users(a)redhat.com&gt;; 主题: 回复： 回复： 回复： [Pki-users] "SecurityDomain HTTPSAdmin URL not found " Hi Alee I used firefox's keymanager plugin to do some simple test. Just connect to RA server and click next and next ,then encontered this error. But I did't go through any source about pkiclient.cgi ,so I 'm not sure where introduce the file pkiclient.xml. another question, If the client request can choose some file which used by server cgi internally, is there any security risk? Best Regards sbaa ------------------ 原始邮件 ------------------ 发件人: &quot;alee&quot;&lt;alee(a)redhat.com&gt;; 发送时间: 2013年4月30日(星期二) 中午1:06 收件人: &quot;骷髅猫&quot;&lt;sbaa(a)vip.qq.com&gt;; 抄送: &quot;Pki-users&quot;&lt;Pki-users(a)redhat.com&gt;; 主题: Re: 回复： 回复： [Pki-users] "SecurityDomain HTTPSAdmin URL not found " I don't see anything in the code about pkiclient.xml. Can you detail exactly what you did to test SCEP? Thanks, Ade On Sun, 2013-04-28 at 15:13 +0800, 骷髅猫 wrote: .