7:18 p.m.
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide
certificates in response to requests from a SLCS server.
And the log file we're seeing on the SLCS server is saying:
--
INFO [TP-Processor7] CertificateServlet.doProcess: CertificateSigningRequest=
-----BEGIN CERTIFICATE REQUEST-----
MIICTjCCAbcCAQAwgaExFDASBgoJkiaJk/IsZAEZFgRzbGNzMRQwEgYKCZImiZPy
..
9ChQYHcP8EpaseH8XymdH1bw
-----END CERTIFICATE REQUEST-----
INFO [TP-Processor7] CertificateServlet.doProcess: send certificate request to CA server
ERROR [TP-Processor7] CMCConnection.checkResponseHeaders: Invalid Content-Type in HTTP
response header: text/html
--
So what we're thinking is that perhaps we are sending our request to the
wrong URL .. viz:
<CAUrl>https://slcscadev.vpac.org:9443/ca/ee/ca/</CAUrl>
Does anyone have any ideas about this please?
--
Graham Jenkins
Australian Research Collaboration Service
Victorian Partnership for Advanced Computing
(+613) 9925-4862
7:46 p.m.
Graham Jenkins wrote:
We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide
certificates in response to requests from a SLCS server.
And the log file we're seeing on the SLCS server is saying:
--
INFO [TP-Processor7] CertificateServlet.doProcess: CertificateSigningRequest=
-----BEGIN CERTIFICATE REQUEST-----
MIICTjCCAbcCAQAwgaExFDASBgoJkiaJk/IsZAEZFgRzbGNzMRQwEgYKCZImiZPy
..
9ChQYHcP8EpaseH8XymdH1bw
-----END CERTIFICATE REQUEST-----
INFO [TP-Processor7] CertificateServlet.doProcess: send certificate request to CA
server
ERROR [TP-Processor7] CMCConnection.checkResponseHeaders: Invalid Content-Type in HTTP
response header: text/html
--
So what we're thinking is that perhaps we are sending our request to the
wrong URL .. viz:
<CAUrl>https://slcscadev.vpac.org:9443/ca/ee/ca/</CAUrl>
Does anyone have any ideas about this please?
What are the DogTag logs like?
I would try /ca/ee/ca/profileSubmitCMCSimple or /ca/profileSubmitCMCSimple
There is a profileSubmitCMCFull if using client auth
There is also a tool called HttpClient for tests:
http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tool...
M.
7:48 p.m.
Marc Sauton wrote:
Graham Jenkins wrote:
> We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide
> certificates in response to requests from a SLCS server.
>
> And the log file we're seeing on the SLCS server is saying:
>
> --
> INFO [TP-Processor7] CertificateServlet.doProcess:
> CertificateSigningRequest=
> -----BEGIN CERTIFICATE REQUEST-----
> MIICTjCCAbcCAQAwgaExFDASBgoJkiaJk/IsZAEZFgRzbGNzMRQwEgYKCZImiZPy
> ..
> 9ChQYHcP8EpaseH8XymdH1bw
> -----END CERTIFICATE REQUEST-----
>
> INFO [TP-Processor7] CertificateServlet.doProcess: send certificate
> request to CA server
> ERROR [TP-Processor7] CMCConnection.checkResponseHeaders: Invalid
> Content-Type in HTTP response header: text/html
> --
>
> So what we're thinking is that perhaps we are sending our request to the
> wrong URL .. viz:
> <CAUrl>https://slcscadev.vpac.org:9443/ca/ee/ca/</CAUrl>
>
> Does anyone have any ideas about this please?
>
>
What are the DogTag logs like?
I would try /ca/ee/ca/profileSubmitCMCSimple or
/ca/profileSubmitCMCSimple
Should be /ca/profileSubmitCMCSimple
There is a profileSubmitCMCFull if using client auth
There is also a tool called HttpClient for tests:
http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tool...
M.
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users
9:57 p.m.
On Thu, 2008-11-13 at 17:46 -0800, Marc Sauton wrote:
Graham Jenkins wrote:
> We're using Dogtag pki-ca-1.0.0-1.fc8 as an Online CA to provide
> certificates in response to requests from a SLCS server.
> ..
What are the DogTag logs like?
I would try /ca/ee/ca/profileSubmitCMCSimple ..
There is a profileSubmitCMCFull if using client auth ..
Thanks Marc. Both of these give a similar response, with the DogTag logs
showing something like:
--
14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: profileId
caSimpleCMCUserCert
[14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: authenticator not
found
[14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmistServlet: set Inputs into
Context
[14/Nov/2008:13:19:07][http-9443-Processor23]: ProfileSubmitServlet: set
sslClientCertProvider
[14/Nov/2008:13:19:07][http-9443-Processor23]: xx Start parsePKCS10 LS12VWxXZHZWNHAxT
..
ZFlCODANCi0tdlVsV2R2VjRwMU1vdGlmQTg2OHE5dzZ5eXk2TTRvLS0NCg==
[14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10: signature
verification enabled
[14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10 setting thread
token
[14/Nov/2008:13:19:07][http-9443-Processor23]: EnrollProfile: parsePKCS10
java.io.IOException: Sequence tag error 45
Any ideas from this?
There is also a tool called HttpClient for tests:
http://www.redhat.com/docs/manuals/cert-system/7.3/html/Command_Line_Tool...
Trying to make sense of this now, not getting very far. :(
--
Graham Jenkins
Australian Research Collaboration Service
Victorian Partnership for Advanced Computing
(+613) 9925-4862
5665
days inactive
5665
days old
3 comments
2 participants
participants (2)
-
Graham Jenkins -
Marc Sauton