Hi, problem with installation

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@...
https://lists.sourceforge.net/lists/listinfo/openxpki-users

new versioning of snapshots

Hi,

Last midnight snapshot generator is back:

http://www7.openxpki.org/lastmidnight/index.html

New version numbering is as follows:

(distribution-name).(major-version).ccyymmdd.hhmmss

with (major-version) = (number).(number) as returned by vergen utility
from the OpenXPKI toolkit,
and date-time label ccyymmdd.hhmmss identifying the last commit to the
part of code related to this particular tarball.

All the best, Sergei

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1

status of openxpki resources

Hi,

1. WebSVN viewer of the OpenXPKI's SVN repository, which is hosted at

http://www7.openxpki.org/svn/openxpki

will be shortly put down because of lack of popularity.

2. Last Midnight Snapshot generator which reported its activity to
the page

http://www7.openxpki.org/lastmidnight/index.html

has been recently switched off until needed code fix.

3. All refs to both resources have been removed from the sources of
the web site of the openxpki. Hopefully soon these changes will
propagate through to all mirrors causing refs actually disappear.

All the best, Sergei

------------------------------------------------------------------------------
Doing More with Less: The Next Generation Virtual Desktop 
What are the key obstacles that have prevented many mid-market businesses
from deploying virtual desktops?   How do next-generation virtual desktops
provide companies an easier-to-deploy, easier-to-manage and more affordable
virtual desktop model.http://www.accelacomm.com/jaw/sfnl/114/51426474/

OpenXPKI Wiki write restrictions, website revamp

Hi,

recently a wave of Wiki spam has been hitting the OpenXPKI wiki. As we currently have few contributions, I
have decided to remove write permissions for normal users in order to deal with this problem. I apologize
for this measure, but I at that rate I cannot keep up with the rate spammers continue to modify the Wiki.

Regarding the website: we are currently setting up a revamp of the OpenXPKI website. In the future we will be
using the SourceForge web hosting, eventually migrating away from the distributed web mirrors. 
For content management our idea is to keep the web site in a separate Git repository, based on the popular
Jekyll blogging site generator.

In the future I see user contributions to the web site and/or the documentation happening via Git pull
requests and an integration step by one of the developers.

cu

Martin

------------------------------------------------------------------------------
Malware Security Report: Protecting Your Business, Customers, and the 
Bottom Line. Protect your business and customers by understanding the 
threat from malware and how it can impact your online business. 
http://www.accelacomm.com/jaw/sfnl/114/51427462/

OpenXPKI interface error

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2

_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@...
https://lists.sourceforge.net/lists/listinfo/openxpki-users

WAITING_FOR_CHILD problem

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd

_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@...
https://lists.sourceforge.net/lists/listinfo/openxpki-users

LDAP Manager cause problem

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev

_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@...
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Unable to approve CSR/CRR with digital signature

Hi again,

I have worked through a "test plan" which I have set up for myself with 
the default TESTDUMMYCA and got to the following point:

- Sign in as root and unlock CA key -> successful
- Issue CRL -> successful
- Request CA Operator Certificate using basic template -> successful
- Login as raop and approve CSR without signature -> successful
- Request RA Operator Certificate using basic template -> successful
- Login as root using external static mode and approve CSR without 
signature -> successful
- Login as John Doe and request User Certificate using basic template -> 
successful
- Login as raop with digital signature -> successful
- Approve CSR with digital signature -> error

I have already configured my trust_anchors in auth.xml, 
workflow_validator_certificate_revocation_request.xml and 
workflow_validator_certificate_signing_request.xml
to
I18N_OPENXPKI_DEPLOYMENT_TEST_DUMMY_CA.

Here is what the webinterface returns:
--------------------------------------------
Error

I18N_OPENXPKI_SERVER_WORKFLOW_VALIDATOR_APPROVALSIGNATURE_SIGNATURE_INVALID

Raw Error Data:

{
   'LIST' => [
     {
       'LABEL' => 
'I18N_OPENXPKI_SERVER_WORKFLOW_VALIDATOR_APPROVALSIGNATURE_SIGNATURE_INVALID',
       'PARAMS' => {}
     }
   ],
   'SERVICE_MSG' => 'ERROR'
}

Certificate Revocation Request: Approval

To approve this certificate revocation request, you can either approve 
with out without signature. Please choose the appropriate button to 
approve the certificate revocation request.
--------------------------------------------
I can still approve the CSR without signature after that. This is the 
content of /var/log/openxpki.log during approval:

--------------------------------------------
2011/03/30 13:48:54 openxpki.system.DEBUG [OpenXPKI::Crypto::CLI 
(/usr/lib/perl5/OpenXPKI/Crypto/CLI.pm:182); raop(RA Operator)@f644] 
Exception: I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_CHILD_ERROR; _
_SIGNAL__ => 0; __EXIT_CODE__ => 1
2011/03/30 13:48:54 openxpki.system.DEBUG [OpenXPKI::Crypto::CLI 
(/usr/lib/perl5/OpenXPKI/Crypto/CLI.pm:182); raop(RA Operator)@f644] 
Exception: I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_CHILD_ERROR; _
_SIGNAL__ => 0; __EXIT_CODE__ => 1
2011/03/30 13:48:54 openxpki.system.DEBUG [OpenXPKI::Crypto::Toolkit 
(/usr/lib/perl5/OpenXPKI/Crypto/Toolkit.pm:464); raop(RA Operator)@f644] 
Exception: I18N_OPENXPKI_TOOLKIT_COMMAND_FAILED; _
_COMMAND__ => OpenXPKI::Crypto::Tool::PKCS7::Command::verify; __ERRVAL__ 
=> I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_CHILD_ERROR; __SIGNAL__ => 0; 
__EXIT_CODE__ => 1
2011/03/30 13:48:54 openxpki.system.DEBUG [OpenXPKI::Crypto::Toolkit 
(/usr/lib/perl5/OpenXPKI/Crypto/Toolkit.pm:464); raop(RA Operator)@f644] 
Exception: I18N_OPENXPKI_TOOLKIT_COMMAND_FAILED; _
_COMMAND__ => OpenXPKI::Crypto::Tool::PKCS7::Command::verify; __ERRVAL__ 
=> I18N_OPENXPKI_CRYPTO_CLI_EXECUTE_CHILD_ERROR; __SIGNAL__ => 0; 
__EXIT_CODE__ => 1
2011/03/30 13:48:54 openxpki.system.WARN 
[OpenXPKI::Server::Workflow::Validator::ApprovalSignature 
(/usr/lib/perl5/OpenXPKI/Server/Workflow/Validator/ApprovalSignature.pm:159); 
raop(RA Operato
r)@f644] Exception: 
I18N_OPENXPKI_SERVER_WORKFLOW_VALIDATOR_APPROVALSIGNATURE_SIGNATURE_INVALID
2011/03/30 13:48:54 openxpki.system.WARN 
[OpenXPKI::Server::Workflow::Validator::ApprovalSignature 
(/usr/lib/perl5/OpenXPKI/Server/Workflow/Validator/ApprovalSignature.pm:159); 
raop(RA Operato
r)@f644] Exception: 
I18N_OPENXPKI_SERVER_WORKFLOW_VALIDATOR_APPROVALSIGNATURE_SIGNATURE_INVALID
2011/03/30 13:48:54 Workflow.ERROR Caught exception from action: 
I18N_OPENXPKI_SERVER_WORKFLOW_VALIDATOR_APPROVALSIGNATURE_SIGNATURE_INVALID; 
reset workflow to old state 'PENDING'
2011/03/30 13:48:54 Workflow.ERROR Caught exception from action: 
I18N_OPENXPKI_SERVER_WORKFLOW_VALIDATOR_APPROVALSIGNATURE_SIGNATURE_INVALID; 
reset workflow to old state 'PENDING'
--------------------------------------------

I will try to investigate a little bit more by activating debug logging...

Regards,
Marc

------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf

Missing Request Tasks for Operators

Hi,

I have built & installed revision 1552 successfully on Ubuntu Lucid 
10.04 LTS.

Just a side note for other users reading this: I had to copy over the 
same missing folders & files mentioned by Robert Weiman in his Post: 
"Re: [OpenXPKI-users] Installing on Debian (was: Installing on Ubuntu 
9.10)" from 19.11.2010.

I wanted to do functionality tests with the preconfigured demo CA before 
migrating the database & files of my old installation which was 
successfully running on rev. 1488 before.

I ran into the following problem: I am missing the "Issue CRL" and 
Request/Revoke Certificate tasks for CA Operator in the "Request" section.
The RA Operator also has no Tasks in the "Request" section.

I have already looked into acl.xml and have found that both should have 
the permission to create these workflows. Seems like the web interface 
does not read this correctly.

Any ideas?

Regards,
Marc

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar

Subject: steps?

steps?

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar

_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@...
https://lists.sourceforge.net/lists/listinfo/openxpki-users

several realms and CRL distribution ...

hi,

if i need several realms for the services running on the dedicated
boxes (openvpn and radius for example) than how can i distribute CRL
to the boxes?

--

-- 
Zeus V. Panchenko
IT Dpt., IBS ltd			      	        GMT+2 (EET)

------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d