Hello, I haven't found information on the topic but it looks like there's a problem with certutil - using IPv4. [root@localhost alias]# certutil -R -k rsa -g 2048 -s "CN=cisco1.localdomain.com" -o cisco1.cert -v 12 -d /var/lib/pki-sub-ca/ -1 -3 -6 certutil: unable to generate key(s) : An I/O error occurred during security authorization. Any ideas would be welcome.
Fortunato wrote:
Hello,
I haven't found information on the topic but it looks like there's a problem with certutil - using IPv4.
[root@localhost alias]# certutil -R -k rsa -g 2048 -s "CN=cisco1.localdomain.com" -o cisco1.cert -v 12 -d /var/lib/pki-sub-ca/ -1 -3 -6 certutil: unable to generate key(s) : An I/O error occurred during security authorization.
Any ideas would be welcome.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
May want to tweak the -d option to point to the alias directory <path-to-alias-dir>, not just /var/lib/pki-sub-ca/ M.
Marc Sauton wrote:
Fortunato wrote:
Hello,
I haven't found information on the topic but it looks like there's a problem with certutil - using IPv4.
[root@localhost alias]# certutil -R -k rsa -g 2048 -s "CN=cisco1.localdomain.com" -o cisco1.cert -v 12 -d /var/lib/pki-sub-ca/ -1 -3 -6 certutil: unable to generate key(s) : An I/O error occurred during security authorization.
Any ideas would be welcome.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
May want to tweak the -d option to point to the alias directory <path-to-alias-dir>, not just /var/lib/pki-sub-ca/ M.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users Side note: the i/o error happens because of the missing NSS db files, either wrong alias directory with -d, or need a certutil -N -d <path> to create them. M.
Fortunato wrote:
Hello,
I haven't found information on the topic but it looks like there's a problem with certutil - using IPv4.
[root@localhost alias]# certutil -R -k rsa -g 2048 -s "CN=cisco1.localdomain.com" -o cisco1.cert -v 12 -d /var/lib/pki-sub-ca/ -1 -3 -6 certutil: unable to generate key(s) : An I/O error occurred during security authorization.
Any ideas would be welcome.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
Hi Fortuanto, We still have a few pending fixes to be done for JSS, which should be coming soon. Thanks, Kashyap
Hi Fortuanto,
We still have a few pending fixes to be done for JSS, which should be coming soon.
Thanks, Kashyap
sorry folks, that was not intended here...
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
participants (3)
-
Fortunato -
kashyap chamarthy -
Marc Sauton