DogTag Response to CMC Request from SLCS Server ..
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide certificates in response to requests from a SLCS server. And the log file we're seeing on the SLCS server is saying: -- INFO [TP-Processor7] CertificateServlet.doProcess: CertificateSigningRequest= -----BEGIN CERTIFICATE REQUEST----- MIICTjCCAbcCAQAwgaExFDASBgoJkiaJk/IsZAEZFgRzbGNzMRQwEgYKCZImiZPy .. 9ChQYHcP8EpaseH8XymdH1bw -----END CERTIFICATE REQUEST----- INFO [TP-Processor7] CertificateServlet.doProcess: send certificate request to CA server ERROR [TP-Processor7] CMCConnection.checkResponseHeaders: Invalid Content-Type in HTTP response header: text/html -- So what we're thinking is that perhaps we are sending our request to the wrong URL .. viz: <CAUrl>https://slcscadev.vpac.org:9443/ca/ee/ca/</CAUrl> Does anyone have any ideas about this please? -- Graham Jenkins Australian Research Collaboration Service Victorian Partnership for Advanced Computing (+613) 9925-4862
Graham Jenkins wrote:
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide certificates in response to requests from a SLCS server.
And the log file we're seeing on the SLCS server is saying:
-- INFO [TP-Processor7] CertificateServlet.doProcess: CertificateSigningRequest= -----BEGIN CERTIFICATE REQUEST----- MIICTjCCAbcCAQAwgaExFDASBgoJkiaJk/IsZAEZFgRzbGNzMRQwEgYKCZImiZPy .. 9ChQYHcP8EpaseH8XymdH1bw -----END CERTIFICATE REQUEST-----
INFO [TP-Processor7] CertificateServlet.doProcess: send certificate request to CA server ERROR [TP-Processor7] CMCConnection.checkResponseHeaders: Invalid Content-Type in HTTP response header: text/html --
So what we're thinking is that perhaps we are sending our request to the wrong URL .. viz: <CAUrl>https://slcscadev.vpac.org:9443/ca/ee/ca/</CAUrl>
Does anyone have any ideas about this please?
What are the DogTag logs like? I would try /ca/ee/ca/profileSubmitCMCSimple or /ca/profileSubmitCMCSimple There is a profileSubmitCMCFull if using client auth There is also a tool called HttpClient for tests: http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tools_G... M.
Marc Sauton wrote:
Graham Jenkins wrote:
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide certificates in response to requests from a SLCS server.
And the log file we're seeing on the SLCS server is saying:
-- INFO [TP-Processor7] CertificateServlet.doProcess: CertificateSigningRequest= -----BEGIN CERTIFICATE REQUEST----- MIICTjCCAbcCAQAwgaExFDASBgoJkiaJk/IsZAEZFgRzbGNzMRQwEgYKCZImiZPy .. 9ChQYHcP8EpaseH8XymdH1bw -----END CERTIFICATE REQUEST-----
INFO [TP-Processor7] CertificateServlet.doProcess: send certificate request to CA server ERROR [TP-Processor7] CMCConnection.checkResponseHeaders: Invalid Content-Type in HTTP response header: text/html --
So what we're thinking is that perhaps we are sending our request to the wrong URL .. viz: <CAUrl>https://slcscadev.vpac.org:9443/ca/ee/ca/</CAUrl>
Does anyone have any ideas about this please?
What are the DogTag logs like? I would try /ca/ee/ca/profileSubmitCMCSimple or /ca/profileSubmitCMCSimple Should be /ca/profileSubmitCMCSimple There is a profileSubmitCMCFull if using client auth There is also a tool called HttpClient for tests: http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tools_G...
M.
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
On Thu, 2008-11-13 at 17:46 -0800, Marc Sauton wrote:
Graham Jenkins wrote:
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide certificates in response to requests from a SLCS server. .. What are the DogTag logs like? I would try /ca/ee/ca/profileSubmitCMCSimple .. There is a profileSubmitCMCFull if using client auth ..
Thanks Marc. Both of these give a similar response, with the DogTag logs showing something like: -- 14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: profileId caSimpleCMCUserCert [14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: authenticator not found [14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmistServlet: set Inputs into Context [14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: set sslClientCertProvider [14/Nov/2008:13:19:07][http-9443-Processor23]: xx Start parsePKCS10 LS12VWxXZHZWNHAxT .. ZFlCODANCi0tdlVsV2R2VjRwMU1vdGlmQTg2OHE5dzZ5eXk2TTRvLS0NCg== [14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10: signature verification enabled [14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10 setting thread token [14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10 java.io.IOException: Sequence tag error 45 Any ideas from this?
There is also a tool called HttpClient for tests: http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tools_G...
Trying to make sense of this now, not getting very far. :( -- Graham Jenkins Australian Research Collaboration Service Victorian Partnership for Advanced Computing (+613) 9925-4862
participants (2)
-
Graham Jenkins -
Marc Sauton