Nabble - EjbCA

Re: Can I parse an certificate request using cert-cvc CertificateParser?

2009-12-23T16:45:40Z

Thanks very much. Merry Christmas again.

stupidtss wrote:

In my web service project, I have a CVC certificate request in byte[] and I try to parse it into an CVCertificate using cert-cvc CertificateParser, I got the message
java.lang.IllegalArgumentException: Expected first tag CV_CERTIFICATE but found REQ_AUTHENTICATION

Am I doing anything wrong? Is the class CVCertificate appropriate to hold a cvc cert request? Is there any way to "read" the byte[] cert request into one of the cert-cvc class for further manipulation?

Merry Christmas to everyone!

From forum: EjbCA - Dev

Re: Can I parse an certificate request using cert-cvc CertificateParser?

2009-12-23T01:09:52Z

Hi,

the certificate parser has two methods that can be used. (see
EjbcaWS.cvcRequest for examples).

If you don't know wich type of object, use parseCVCObject.
-----
CVCObject parsedObject =
CertificateParser.parseCVCObject(Base64.decode(cvcreq.getBytes()));
if (parsedObject instanceof CVCAuthenticatedRequest) {
...
-----

If you know it's a certificate, use parseCertificate.
-----
CVCertificate certObject =
CertificateParser.parseCertificate(Base64.decode(b64cert));
java.security.cert.Certificate iscert = new
CardVerifiableCertificate(certObject);
-----

Merry christmas,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

stupidtss wrote:

> In my web service project, I have a CVC certificate request in byte[] and I
> try to parse it into an CVCertificate using cert-cvc CertificateParser, I
> got the message
> java.lang.IllegalArgumentException: Expected first tag CV_CERTIFICATE but
> found REQ_AUTHENTICATION
>
> Am I doing anything wrong? Is the class CVCertificate appropriate to hold a
> cvc cert request? Is there any way to "read" the byte[] cert request into
> one of the cert-cvc class for further manipulation?
>
> Merry Christmas to everyone!
>

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Re: External CRLs ingestion

2009-12-23T00:36:57Z

Hi Leonard,

There is no way to import a CRL in EJBCA. It would not be used for anything.

We are planning to create tools to import CRLs in the external OCSP
responder, it's rather easy. It's not developed yet though.
If you have development skills you can o it yourself though, all
information is open.

Cheers,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

le0nard wrote:

> Hello,
>
> On my EJBCA PKI, I have a CA signed by an external CA.
> By now I didn't find the way to ingest CRLs coming from this external CA.
> These CRLs should inform is my Ca or a CA in ots hierarchy has been revoked.
> Someone can help ?
>
> I also tried to use OCSP responder, but a responder can only ingest
> revokation lists by editing its database. Can It ingest CRLs also ?
>
> Thanks
> Leonard

From forum: EjbCA - Dev

External CRLs ingestion for validation

2009-12-23T00:22:13Z

Hello,

On my EJBCA PKI, I have a CA signed by an external CA.
By now I didn't find the way to ingest CRLs coming from this external CA in order to validate certificate. These CRLs should inform is my CA or a CA in its hierarchy has been revoked. Someone can help ?

I also tried to use OCSP responder, but a responder can only ingest revokation lists by editing its database. Can It ingest CRLs also ?

Thanks
Leonard

From forum: EjbCA - Dev

Can I parse an certificate request using cert-cvc CertificateParser?

2009-12-22T01:48:24Z

In my web service project, I have a CVC certificate request in byte[] and I try to parse it into an CVCertificate using cert-cvc CertificateParser, I got the message
java.lang.IllegalArgumentException: Expected first tag CV_CERTIFICATE but found REQ_AUTHENTICATION

Am I doing anything wrong? Is the class CVCertificate appropriate to hold a cvc cert request? Is there any way to "read" the byte[] cert request into one of the cert-cvc class for further manipulation?

Merry Christmas to everyone!

From forum: EjbCA - Dev

eBuppies.com - Offers New Online Dating Site for Black Urban Professionals

2009-12-21T14:26:35Z

<http://www.ebuppies.com/tellafriend.php>

December 18, 2009

<http://www.ebuppies.com/signup.php>

Dear Friend, <http://www.ebuppies.com>

eBuppies.com (www.ebuppies.com <http://www.ebuppies.com/signup.php>
) is a new online dating site that is dedicated to providing singles
from all over with the opportunity to connect with other buppy singles
in their local area or anywhere of their choice.

More and more buppy singles are going online to connect with others
because going out week after week to nightclubs and bars can be
tiresome, as well as expensive. eBuppies.com makes dating easy by
hosting hundreds of profiles of different singles looking for love.
Buppies can join on a monthly basis for less than they would probably
pay for one night at a nightclub or bar.

Buppies who are looking for love, romance or just friendship now have
a unique resource that can help them discover their future soul mate:
eBuppies.com.

Although high technology drives eBuppies.com, the online dating site
is simple and easy for buppies to navigate. Buppies can register,
browse, search and contact other singles
<http://www.ebuppies.com/signup.php>
at no charge. There is also no charge for buppies to upload a photo
with their profile. A control panel enables buppies to customize
preferences based on their individual requirements. The control panel
also blocks undesired contacts for buppies' convenience.

The pricing for membership is quite cost effective especially for the
average buppy. By January 31 2010 visitors can sign up for 1 Month and
get 30 Days extra membership exclusively through our THIRTYPLUS
<http://www.ebuppies.com/signup.php>
promo code.

For more information, visit www.ebuppies.com.
<http://www.ebuppies.com/signup.php>

About eBuppies.com:

eBuppies.com is a new online dating service based in San Francisco.
Its goal is to provide easy and affordable online dating to Black
Urban Professionals by using state of the art chat systems, instant
messaging, and forum technology to satisfy today's evolving online
community demands.

Terms of use <http://www.ebuppies.com/index.php?page=terms_of_use>

Contact Info:

Name: Mr. F. Jackson

Address: 1230 Market Street, #252

City: San Francisco

State: California

Country: United States

Zip: 94102

Web Address: www.ebuppies.com <http://www.ebuppies.com/signup.php>

Phone: 510-575-4124

/

/

/ / <http://www.ebuppies.com/signup.php>

Site Statistics

Special Offer!

Members in Last Week:
1

Total Male eBuppies:
10

Total Female eBuppies:
15

Pictures in Last Week:
0

Members online:
0

News

Women More Likely to Snoop Than Men

Nov 24, 2009

In the new film, Little Black Book, Brittany Murphy's character
engages in some high-tech snooping on her new boyfriend. Based...

more <http://www.ebuppies.com/signup.php>

Internet Dating More Successful than Thought

Nov 24, 2009

Internet dating is proving a much more successful way to find
long-term romance and friendship for thousands of people than...

more <http://www.ebuppies.com/signup.php>

All News <http://www.ebuppies.com/signup.php>

Poll

<http://www.ebuppies.com/signup.php>

Success Stories

A Sister's Story

Sep 11, 2009

by Monique <javascript:popUpScrollWindow2(>

What initially started out as something to relieve a little boredom
and to have some fun turned into one of...

more <http://www.ebuppies.com/signup.php>

All Stories <http://www.ebuppies.com/signup.php>

<http://www.ebuppies.com/signup.php>

Welcome to eBuppies.com

See why eBuppies.com is the fastest growing Black Urban Professional
relationship site on the web. Create your eBuppies.com profile to
begin the exciting journey towards finding your match.

Members online: 0 <http://www.ebuppies.com/onlineusers.php>

Don't stay alone, Join Now for Free
<http://www.ebuppies.com/signup.php>

Newest eBuppies

kldixson <http://www.ebuppies.com/signup.php>

systemsthinking
<http://www.ebuppies.com/signup.php>

Show full list <http://www.ebuppies.com/signup.php>

Newest Profiles

brotherX <http://www.ebuppies.com/signup.php>

*Age:*
40

*Gender:*
Man

*Looking for:*
Woman

*Location:*
Albany,

California,

United States

<javascript:popUpScrollWindow2(>

No Pictures

*Active wihin 1 week*
View Profile <http://www.ebuppies.com/signup.php>

kldixon <http://www.ebuppies.com/signup.php>

*Age:*
40

*Gender:*
Man

*Looking for:*
Woman

*Location:*
Oakland,

California,

United States

<javascript:popUpScrollWindow2(>

No Pictures

*Active wihin 1 week*
View Profile <http://www.ebuppies.com/signup.php>

Login <http://www.ebuppies.com/signup.php>
| Privacy <http://www.ebuppies.com/signup.php>
| Terms of Use <http://www.ebuppies.com/signup.php>
| Services <http://www.ebuppies.com/signup.php>
| FAQ's <http://www.ebuppies.com/signup.php>
| Articles <http://www.ebuppies.com/signup.php>
| Affiliate <http://www.ebuppies.com/signup.php>
| Invite a Friend <http://www.ebuppies.com/signup.php>
| Feedback <http://www.ebuppies.com/signup.php>

<table cellspacing="0" cellpadding="2" border="0" width="100%">
<tbody>
<tr>
<td colspan=3 align=right ><font face="arial,verdana"
size="2">If you do not want to receive any more newsletters,
http://ebuppies.com/emailserv/?p=unsubscribe&uid=02c5d9fc29d5537a21d8131e98ce6495
To update your preferences and to unsubscribe visit
http://ebuppies.com/emailserv/?p=preferences&uid=02c5d9fc29d5537a21d8131e98ce6495
Forward a Message to Someone
http://ebuppies.com/emailserv/?p=forward&uid=02c5d9fc29d5537a21d8131e98ce6495&mid=20</font></td>
</tr>
<tr>
<td><font face="arial,verdana" size="1">CUBEMEDIALAB<br><br />
1230 Market Street<br>
Suite 252<br>
San Francisco, California 94102<br>
USA<br />
</font></td><br />
<td align="right"><a href="http://www.cubemedialab.com"
target="_blank"><img border="0"
src="http://www.ebuppies.com/images/cube_logo.gif" alt="Try digital design
with cubemedialab.com!" /></a></td><br />
</tr>
</tbody>
</table>

--
Powered by PHPlist, www.phplist.com --

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Re: Bug or feature : list end entities with expiring certificates

2009-12-21T07:33:31Z

This is fixed in 3.9.3 that was just released.

Cheers,
Tomas

Tham Wickenberg wrote:

> Hello Maxime,
>
> We have recently made changes to the expiration notifications and I
> believe we may have missed how this affect the "Search/edit end
> entities" functionality.
>
> Thank you for pointing this out!
>
> I have created https://jira.primekey.se/browse/ECA-1517 so that this
> issue should be investigated and fixed.
>
> Kind regards,
> Tham Wickenberg
>
> VERAC Maxime wrote:
>> Hello everybody,
>>
>> I'm a bit disappointed by the behaviour of EJBCA.
>>
>> When, in the "search/edit end entities" menu, I try to list the end entities with certificates expiring within 30 days, it does not work for certificates having their status set to "21", corresponding to the certificates for which an e-mail notification has been done regarding their forthcoming expiration...
>>
>> Does this correspond to the normal behaviour ?
>> Is it possible to use the Certificate Expiration Service without modifying the status of the certificate ?
>>
>> Best regards,
>>
>> Maxime VERAC
>> Consultant
>> Fixe : +33 (0)1 49 03 25 46
>> maxime.verac@... <mailto:maxime.verac@...>
>> solucom
>> Tour Franklin : 100 - 101 terrasse Boieldieu
>> 92042 Paris La Défense Cedex
>>
>> ________________________________
>>
>> De: Johan Eklund [mailto:ejbca-support@...]
>> Date: jeu. 17/12/2009 09:05
>> À: ejbca-develop@...
>> Objet : Re: [Ejbca-develop] Error ant install - jboss web service
>>
>>
>>
>> Hi Joenateen,
>>
>> The error message that counts in that pretty verbose message is:
>>
>> "java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080"
>>
>> This means that JBoss's built in Tomcat can't start since some other application (or an old running JBoss/Tomcat) is using port 8080 already..
>>
>> Best Regards,
>> Johan
>>
>>
>>
>> Joenateen skrev:
>>
>>> Ok, Don't laugh me of the forum for this question. I am checking the JBOSS
>>> logs after a failed attempt at installing the EJBCA and I see that it is
>>> complaining about a web service here. Do I have to have a seperate web
>>> server installed for this to work? Does JBOSS handle that.
>>>
>>> And yes I am a newbie to EJBCA.
>>>
>>> 2009-12-16 13:09:01,516 ERROR
>>> [org.jboss.system.server.profileservice.ProfileServiceBootstrap] (main)
>>> Failed to load profile: Summary of incomplete deployments (SEE PREVIOUS
>>> ERRORS FOR DETAILS):
>>>
>>> DEPLOYMENTS MISSING DEPENDENCIES:
>>> Deployment "jboss.web.deployment:war=/ROOT" is missing the following
>>> dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/admin-console" is missing the
>>> following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca" is missing the following
>>> dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/adminweb" is missing the
>>> following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/doc" is missing the following
>>> dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/ejbcaws" is missing the
>>> following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/publicweb" is missing the
>>> following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/apply" is missing
>>> the following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/healthcheck" is
>>> missing the following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/status" is missing
>>> the following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/webdist" is missing
>>> the following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/ejbca/xkms" is missing the following
>>> dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/invoker" is missing the following
>>> dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/jbossws" is missing the following
>>> dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/jmx-console" is missing the
>>> following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>> Deployment "jboss.web.deployment:war=/web-console" is missing the
>>> following dependencies:
>>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>>> but is actually in state "** NOT FOUND Depends on
>>> 'jboss.web:service=WebServer' **")
>>>
>>> DEPLOYMENTS IN ERROR:
>>> Deployment "WebServer" is in error due to the following reason(s):
>>> LifecycleException: Protocol handler initialization failed:
>>> java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080
>>> Deployment "jboss.web:service=WebServer" is in error due to the following
>>> reason(s): ** NOT FOUND Depends on 'jboss.web:service=WebServer' **
>>>
>>> 2009-12-16 13:09:01,516 INFO
>>> [org.jboss.bootstrap.microcontainer.ServerImpl] (main) JBoss
>>> (Microcontainer) [5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)]
>>> Started in 2m:2s:506ms
>>>
>>>
>>>
>>
>> --
>> PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> ------------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Verizon Developer Community
>> Take advantage of Verizon's best-in-class app development support
>> A streamlined, 14 day to market process makes app distribution fast and easy
>> Join now and get one step closer to millions of Verizon customers
>> http://p.sf.net/sfu/verizon-dev2dev
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejbca-develop@...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>
>
>
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

EJBCA 3.9.3

2009-12-21T07:19:27Z

In time for christmas the EJBCA team would like to give you a christmas
present in the form of EJBCA 3.9.3. This is a release that fixes one
unfortunate regression in 3.9.2, and also adds some new features and
plenty of improvements and bugfixes. 42 issues in total have been resolved.

Some minor features and options and some bug fixes and stabilizations.

Noteworthy changes:
- Fixed a regression in 3.9.2 where you could not upload files in the
admin GUI.
- Certificate profiles can now specify a different signature algorithm
than the CA. Useful to start migrating SHA1 CAs to issue SHA256
certificates.
- Possibility to use part of user data in LDAP DN but not in certificate
DN when publishing certificate to LDAP.
- Possibility to set fixed end date of certificates in certificate
profile and CA configuration.
- Possibility to configure several notification services for expiring
certificates, notifying at different times, i.e. 30 days, 7 days, etc.
- Browser enrollment tested with Windows 7.
- ECC improvements and fixes for CAs and HSMs, CA renew keys, CA import,
brainpool curves, explicit ec parameters, clientToolBox etc.
- GUI improvement to the admin GUI with nicer navigation menu and CSS.
Contributed by Linagora, France.
- cert-cvc: fixed rare possibility to get bad encoding of EC points in
certificates. Contributed by DGBK, Netherlands.
- CVC CA fixes and improvements for EAC PKI, approvals, import CAs, fix
cli info command, .cvcert instear of .crt when downloading certs, etc.
- Don't publish certificates for inactive CA services to LDAP.
- Fix so renewing CA keys in admin GUI does not reload all CA tokens.
- Fixed an OutOfMemory error when failing to publish large CRLs with
connection closed error.
- Fix download issues with IE for exported CA keystores.
- Many small optimizations, fixes and improvements.

Read the full changelog for details.

For upgrade instructions, please see UPGRADE.

Merry christmas,
The EJBCA Team.

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-news mailing list
Ejbca-news@...
https://lists.sourceforge.net/lists/listinfo/ejbca-news

From forum: EjbCA - News

EJBCA 3.9.3

2009-12-21T07:19:27Z

In time for christmas the EJBCA team would like to give you a christmas
present in the form of EJBCA 3.9.3. This is a release that fixes one
unfortunate regression in 3.9.2, and also adds some new features and
plenty of improvements and bugfixes. 42 issues in total have been resolved.

Some minor features and options and some bug fixes and stabilizations.

Noteworthy changes:
- Fixed a regression in 3.9.2 where you could not upload files in the
admin GUI.
- Certificate profiles can now specify a different signature algorithm
than the CA. Useful to start migrating SHA1 CAs to issue SHA256
certificates.
- Possibility to use part of user data in LDAP DN but not in certificate
DN when publishing certificate to LDAP.
- Possibility to set fixed end date of certificates in certificate
profile and CA configuration.
- Possibility to configure several notification services for expiring
certificates, notifying at different times, i.e. 30 days, 7 days, etc.
- Browser enrollment tested with Windows 7.
- ECC improvements and fixes for CAs and HSMs, CA renew keys, CA import,
brainpool curves, explicit ec parameters, clientToolBox etc.
- GUI improvement to the admin GUI with nicer navigation menu and CSS.
Contributed by Linagora, France.
- cert-cvc: fixed rare possibility to get bad encoding of EC points in
certificates. Contributed by DGBK, Netherlands.
- CVC CA fixes and improvements for EAC PKI, approvals, import CAs, fix
cli info command, .cvcert instear of .crt when downloading certs, etc.
- Don't publish certificates for inactive CA services to LDAP.
- Fix so renewing CA keys in admin GUI does not reload all CA tokens.
- Fixed an OutOfMemory error when failing to publish large CRLs with
connection closed error.
- Fix download issues with IE for exported CA keystores.
- Many small optimizations, fixes and improvements.

Read the full changelog for details.

For upgrade instructions, please see UPGRADE.

Merry christmas,
The EJBCA Team.

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Re: Bug or feature : list end entities with expiring certificates

2009-12-18T02:15:09Z

Hello Maxime,

We have recently made changes to the expiration notifications and I
believe we may have missed how this affect the "Search/edit end
entities" functionality.

Thank you for pointing this out!

I have created https://jira.primekey.se/browse/ECA-1517 so that this
issue should be investigated and fixed.

Kind regards,
Tham Wickenberg

VERAC Maxime wrote:

> Hello everybody,
>
> I'm a bit disappointed by the behaviour of EJBCA.
>
> When, in the "search/edit end entities" menu, I try to list the end entities with certificates expiring within 30 days, it does not work for certificates having their status set to "21", corresponding to the certificates for which an e-mail notification has been done regarding their forthcoming expiration...
>
> Does this correspond to the normal behaviour ?
> Is it possible to use the Certificate Expiration Service without modifying the status of the certificate ?
>
> Best regards,
>
> Maxime VERAC
> Consultant
> Fixe : +33 (0)1 49 03 25 46
> maxime.verac@... <mailto:maxime.verac@...>
> solucom
> Tour Franklin : 100 - 101 terrasse Boieldieu
> 92042 Paris La Défense Cedex
>
> ________________________________
>
> De: Johan Eklund [mailto:ejbca-support@...]
> Date: jeu. 17/12/2009 09:05
> À: ejbca-develop@...
> Objet : Re: [Ejbca-develop] Error ant install - jboss web service
>
>
>
> Hi Joenateen,
>
> The error message that counts in that pretty verbose message is:
>
> "java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080"
>
> This means that JBoss's built in Tomcat can't start since some other application (or an old running JBoss/Tomcat) is using port 8080 already..
>
> Best Regards,
> Johan
>
>
>
> Joenateen skrev:
>
>> Ok, Don't laugh me of the forum for this question. I am checking the JBOSS
>> logs after a failed attempt at installing the EJBCA and I see that it is
>> complaining about a web service here. Do I have to have a seperate web
>> server installed for this to work? Does JBOSS handle that.
>>
>> And yes I am a newbie to EJBCA.
>>
>> 2009-12-16 13:09:01,516 ERROR
>> [org.jboss.system.server.profileservice.ProfileServiceBootstrap] (main)
>> Failed to load profile: Summary of incomplete deployments (SEE PREVIOUS
>> ERRORS FOR DETAILS):
>>
>> DEPLOYMENTS MISSING DEPENDENCIES:
>> Deployment "jboss.web.deployment:war=/ROOT" is missing the following
>> dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/admin-console" is missing the
>> following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca" is missing the following
>> dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/adminweb" is missing the
>> following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/doc" is missing the following
>> dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/ejbcaws" is missing the
>> following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/publicweb" is missing the
>> following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/apply" is missing
>> the following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/healthcheck" is
>> missing the following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/status" is missing
>> the following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/publicweb/webdist" is missing
>> the following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/ejbca/xkms" is missing the following
>> dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/invoker" is missing the following
>> dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/jbossws" is missing the following
>> dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/jmx-console" is missing the
>> following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>> Deployment "jboss.web.deployment:war=/web-console" is missing the
>> following dependencies:
>> Dependency "jboss.web:service=WebServer" (should be in state "Create",
>> but is actually in state "** NOT FOUND Depends on
>> 'jboss.web:service=WebServer' **")
>>
>> DEPLOYMENTS IN ERROR:
>> Deployment "WebServer" is in error due to the following reason(s):
>> LifecycleException: Protocol handler initialization failed:
>> java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080
>> Deployment "jboss.web:service=WebServer" is in error due to the following
>> reason(s): ** NOT FOUND Depends on 'jboss.web:service=WebServer' **
>>
>> 2009-12-16 13:09:01,516 INFO
>> [org.jboss.bootstrap.microcontainer.ServerImpl] (main) JBoss
>> (Microcontainer) [5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)]
>> Started in 2m:2s:506ms
>>
>>
>>
>
>
> --
> PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf
>
>
>
>
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

From forum: EjbCA - Dev

Bug or feature : list end entities with expiring certificates

2009-12-18T00:37:41Z

Hello everybody,

I'm a bit disappointed by the behaviour of EJBCA.

When, in the "search/edit end entities" menu, I try to list the end entities with certificates expiring within 30 days, it does not work for certificates having their status set to "21", corresponding to the certificates for which an e-mail notification has been done regarding their forthcoming expiration...

Does this correspond to the normal behaviour ?
Is it possible to use the Certificate Expiration Service without modifying the status of the certificate ?

Best regards,

Maxime VERAC
Consultant
Fixe : +33 (0)1 49 03 25 46
maxime.verac@... <mailto:maxime.verac@...>
solucom
Tour Franklin : 100 - 101 terrasse Boieldieu
92042 Paris La Défense Cedex

________________________________

De: Johan Eklund [mailto:ejbca-support@...]
Date: jeu. 17/12/2009 09:05
À: ejbca-develop@...
Objet : Re: [Ejbca-develop] Error ant install - jboss web service

Hi Joenateen,

The error message that counts in that pretty verbose message is:

"java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080"

This means that JBoss's built in Tomcat can't start since some other application (or an old running JBoss/Tomcat) is using port 8080 already..

Best Regards,
Johan

Joenateen skrev:

> Ok, Don't laugh me of the forum for this question. I am checking the JBOSS
> logs after a failed attempt at installing the EJBCA and I see that it is
> complaining about a web service here. Do I have to have a seperate web
> server installed for this to work? Does JBOSS handle that.
>
> And yes I am a newbie to EJBCA.
>
> 2009-12-16 13:09:01,516 ERROR
> [org.jboss.system.server.profileservice.ProfileServiceBootstrap] (main)
> Failed to load profile: Summary of incomplete deployments (SEE PREVIOUS
> ERRORS FOR DETAILS):
>
> DEPLOYMENTS MISSING DEPENDENCIES:
> Deployment "jboss.web.deployment:war=/ROOT" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/admin-console" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/adminweb" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/doc" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/ejbcaws" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/apply" is missing
> the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/healthcheck" is
> missing the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/status" is missing
> the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/webdist" is missing
> the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/xkms" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/invoker" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/jbossws" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/jmx-console" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/web-console" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
>
> DEPLOYMENTS IN ERROR:
> Deployment "WebServer" is in error due to the following reason(s):
> LifecycleException: Protocol handler initialization failed:
> java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080
> Deployment "jboss.web:service=WebServer" is in error due to the following
> reason(s): ** NOT FOUND Depends on 'jboss.web:service=WebServer' **
>
> 2009-12-16 13:09:01,516 INFO
> [org.jboss.bootstrap.microcontainer.ServerImpl] (main) JBoss
> (Microcontainer) [5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)]
> Started in 2m:2s:506ms
>
>

--
PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

winmail.dat (12K) Download Attachment

From forum: EjbCA - Dev

Re: Error ant install - jboss web service

2009-12-17T08:00:09Z

Yes this was the problem. I checked netstat and it was in use. I made the mistake of installing all of NeatBeans 6.x and it installed a service that was taking the port. I remove the install rebooted and started from scratch. I also used JBOSS 4.2.3. So basically, users beware of installing Netbeans with this. Thanks for the help!

Johan Eklund wrote:

Hi Joenateen,

The error message that counts in that pretty verbose message is:

"java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080"

This means that JBoss's built in Tomcat can't start since some other application (or an old running JBoss/Tomcat) is using port 8080 already..

Best Regards,
Johan

Joenateen skrev:
> Ok, Don't laugh me of the forum for this question. I am checking the JBOSS
> logs after a failed attempt at installing the EJBCA and I see that it is
> complaining about a web service here. Do I have to have a seperate web
> server installed for this to work? Does JBOSS handle that.
>
> And yes I am a newbie to EJBCA.
>
> 2009-12-16 13:09:01,516 ERROR
> [org.jboss.system.server.profileservice.ProfileServiceBootstrap] (main)
> Failed to load profile: Summary of incomplete deployments (SEE PREVIOUS
> ERRORS FOR DETAILS):
>
> DEPLOYMENTS MISSING DEPENDENCIES:
> Deployment "jboss.web.deployment:war=/ROOT" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/admin-console" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/adminweb" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/doc" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/ejbcaws" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/apply" is missing
> the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/healthcheck" is
> missing the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/status" is missing
> the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/publicweb/webdist" is missing
> the following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/ejbca/xkms" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/invoker" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/jbossws" is missing the following
> dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/jmx-console" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
> Deployment "jboss.web.deployment:war=/web-console" is missing the
> following dependencies:
> Dependency "jboss.web:service=WebServer" (should be in state "Create",
> but is actually in state "** NOT FOUND Depends on
> 'jboss.web:service=WebServer' **")
>
> DEPLOYMENTS IN ERROR:
> Deployment "WebServer" is in error due to the following reason(s):
> LifecycleException: Protocol handler initialization failed:
> java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080
> Deployment "jboss.web:service=WebServer" is in error due to the following
> reason(s): ** NOT FOUND Depends on 'jboss.web:service=WebServer' **
>
> 2009-12-16 13:09:01,516 INFO
> [org.jboss.bootstrap.microcontainer.ServerImpl] (main) JBoss
> (Microcontainer) [5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)]
> Started in 2m:2s:506ms
>
>

--
PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@primekey.se for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Re: Error ant install - jboss web service

2009-12-17T00:05:11Z

Hi Joenateen,

The error message that counts in that pretty verbose message is:

"java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080"

This means that JBoss's built in Tomcat can't start since some other application (or an old running JBoss/Tomcat) is using port 8080 already..

Best Regards,
Johan

Joenateen skrev:

smime.p7s (3K) Download Attachment

From forum: EjbCA - Dev

Error ant install - jboss web service

2009-12-16T14:12:47Z

Ok, Don't laugh me of the forum for this question. I am checking the JBOSS logs after a failed attempt at installing the EJBCA and I see that it is complaining about a web service here. Do I have to have a seperate web server installed for this to work? Does JBOSS handle that.

And yes I am a newbie to EJBCA.

2009-12-16 13:09:01,516 ERROR [org.jboss.system.server.profileservice.ProfileServiceBootstrap] (main) Failed to load profile: Summary of incomplete deployments (SEE PREVIOUS ERRORS FOR DETAILS):

DEPLOYMENTS MISSING DEPENDENCIES:
Deployment "jboss.web.deployment:war=/ROOT" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/admin-console" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/adminweb" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/doc" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/ejbcaws" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/publicweb" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/publicweb/apply" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/publicweb/healthcheck" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/publicweb/status" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/publicweb/webdist" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/ejbca/xkms" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/invoker" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/jbossws" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/jmx-console" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")
Deployment "jboss.web.deployment:war=/web-console" is missing the following dependencies:
Dependency "jboss.web:service=WebServer" (should be in state "Create", but is actually in state "** NOT FOUND Depends on 'jboss.web:service=WebServer' **")

DEPLOYMENTS IN ERROR:
Deployment "WebServer" is in error due to the following reason(s): LifecycleException: Protocol handler initialization failed: java.net.BindException: Address already in use: JVM_Bind /127.0.0.1:8080
Deployment "jboss.web:service=WebServer" is in error due to the following reason(s): ** NOT FOUND Depends on 'jboss.web:service=WebServer' **

2009-12-16 13:09:01,516 INFO [org.jboss.bootstrap.microcontainer.ServerImpl] (main) JBoss (Microcontainer) [5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)] Started in 2m:2s:506ms

From forum: EjbCA - Dev

Re: Error with EBJCA bootstrap

2009-12-16T12:01:29Z

It was the JRE being picked up in my path instead of the JDK.

Joenateen wrote:

Hello,

I am trying to install the EJBCA package on windows XP and I get an error in conversions in the adminweb.war files, "i think". Has anyone seen this error before?

publicweb.war:
[mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\publicweb.war\WEB-INF\lib
[copy] Copying 45 files to C:\Sun\ejbca_3_9_2\tmp\publicweb.war
[copy] Copied 7 empty directories to 1 empty directory under C:\Sun\ejbca_3
_9_2\tmp\publicweb.war
[copy] Copying 2 files to C:\Sun\ejbca_3_9_2\tmp\publicweb.war\WEB-INF\lib
[war] Building war: C:\Sun\ejbca_3_9_2\dist\publicweb.war

renew.war:

scep.war:
[war] Building war: C:\Sun\ejbca_3_9_2\dist\scep.war

webdist.war:
[war] Building war: C:\Sun\ejbca_3_9_2\dist\webdist.war

status.war:
[war] Building war: C:\Sun\ejbca_3_9_2\dist\status.war

cmp.war:
[war] Building war: C:\Sun\ejbca_3_9_2\dist\cmp.war

healthcheck.war:
[war] Building war: C:\Sun\ejbca_3_9_2\dist\healthcheck.war

adminweb.war:
[mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\WEB-INF\lib
[mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\reports
[copy] Copying 127 files to C:\Sun\ejbca_3_9_2\tmp\adminweb.war
[delete] Deleting: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\languages\languagefile
.zh.properties
[native2ascii] Converting 1 file from C:\Sun\ejbca_3_9_2\tmp\preprocessed\adminw
eb\languages to C:\Sun\ejbca_3_9_2\tmp\adminweb.war\languages
[native2ascii] java.io.UnsupportedEncodingException: GBK

BUILD FAILED
C:\Sun\ejbca_3_9_2\build.xml:63: The following error occurred while executing th
is line:
C:\Sun\ejbca_3_9_2\build.xml:276: conversion failed

Total time: 2 minutes 38 seconds
C:\Sun\ejbca_3_9_2>

_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
http://clk.atdmt.com/GBL/go/171222986/direct/01/
------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Message: 7

2009-12-16T11:04:36Z

It was a JRE issue. I had to move the path variable around until I got it to use the JDK.

Hotmail: Powerful Free email with security by Microsoft. Get it now.
------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Re: Error with EBJCA bootstrap

2009-12-16T08:05:44Z

Hi,

my guess is that you don't have the "international" version of java. t
The error you get is when it tries to encoe the chineese language files
for the admin-gui. "unsupported encoding". can you download the full
international jdk instead?

Cheers,
Tomas

On Wed, 16 Dec 2009, Mark Seaborn wrote:

>
> Hello,
>
> I am trying to install the EJBCA package on windows XP and I get an error in conversions in the adminweb.war files, "i think". Has anyone seen this error before?
>
>
>
>
>
>
>
>
>
> publicweb.war:
> [mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\publicweb.war\WEB-INF\lib
> [copy] Copying 45 files to C:\Sun\ejbca_3_9_2\tmp\publicweb.war
> [copy] Copied 7 empty directories to 1 empty directory under C:\Sun\ejbca_3
> _9_2\tmp\publicweb.war
> [copy] Copying 2 files to C:\Sun\ejbca_3_9_2\tmp\publicweb.war\WEB-INF\lib
> [war] Building war: C:\Sun\ejbca_3_9_2\dist\publicweb.war
>
> renew.war:
>
> scep.war:
> [war] Building war: C:\Sun\ejbca_3_9_2\dist\scep.war
>
> webdist.war:
> [war] Building war: C:\Sun\ejbca_3_9_2\dist\webdist.war
>
> status.war:
> [war] Building war: C:\Sun\ejbca_3_9_2\dist\status.war
>
> cmp.war:
> [war] Building war: C:\Sun\ejbca_3_9_2\dist\cmp.war
>
> healthcheck.war:
> [war] Building war: C:\Sun\ejbca_3_9_2\dist\healthcheck.war
>
> adminweb.war:
> [mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\WEB-INF\lib
> [mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\reports
> [copy] Copying 127 files to C:\Sun\ejbca_3_9_2\tmp\adminweb.war
> [delete] Deleting: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\languages\languagefile
> .zh.properties
> [native2ascii] Converting 1 file from C:\Sun\ejbca_3_9_2\tmp\preprocessed\adminw
> eb\languages to C:\Sun\ejbca_3_9_2\tmp\adminweb.war\languages
> [native2ascii] java.io.UnsupportedEncodingException: GBK
>
> BUILD FAILED
> C:\Sun\ejbca_3_9_2\build.xml:63: The following error occurred while executing th
> is line:
> C:\Sun\ejbca_3_9_2\build.xml:276: conversion failed
>
> Total time: 2 minutes 38 seconds
> C:\Sun\ejbca_3_9_2>
>
> _________________________________________________________________
> Hotmail: Powerful Free email with security by Microsoft.
> http://clk.atdmt.com/GBL/go/171222986/direct/01/

From forum: EjbCA - Dev

Error with EBJCA bootstrap

2009-12-16T07:51:20Z

Hello,
     I am trying to install the EJBCA package on windows XP and I get an error in conversions in the adminweb.war files, "i think". Has anyone seen this error before?

publicweb.war:
    [mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\publicweb.war\WEB-INF\lib
     [copy] Copying 45 files to C:\Sun\ejbca_3_9_2\tmp\publicweb.war
     [copy] Copied 7 empty directories to 1 empty directory under C:\Sun\ejbca_3
_9_2\tmp\publicweb.war
     [copy] Copying 2 files to C:\Sun\ejbca_3_9_2\tmp\publicweb.war\WEB-INF\lib
      [war] Building war: C:\Sun\ejbca_3_9_2\dist\publicweb.war
renew.war:
scep.war:
      [war] Building war: C:\Sun\ejbca_3_9_2\dist\scep.war
webdist.war:
      [war] Building war: C:\Sun\ejbca_3_9_2\dist\webdist.war
status.war:
      [war] Building war: C:\Sun\ejbca_3_9_2\dist\status.war
cmp.war:
      [war] Building war: C:\Sun\ejbca_3_9_2\dist\cmp.war
healthcheck.war:
      [war] Building war: C:\Sun\ejbca_3_9_2\dist\healthcheck.war
adminweb.war:
    [mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\WEB-INF\lib
    [mkdir] Created dir: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\reports
     [copy] Copying 127 files to C:\Sun\ejbca_3_9_2\tmp\adminweb.war
   [delete] Deleting: C:\Sun\ejbca_3_9_2\tmp\adminweb.war\languages\languagefile
.zh.properties
[native2ascii] Converting 1 file from C:\Sun\ejbca_3_9_2\tmp\preprocessed\adminw
eb\languages to C:\Sun\ejbca_3_9_2\tmp\adminweb.war\languages
[native2ascii] java.io.UnsupportedEncodingException: GBK
BUILD FAILED
C:\Sun\ejbca_3_9_2\build.xml:63: The following error occurred while executing th
is line:
C:\Sun\ejbca_3_9_2\build.xml:276: conversion failed
Total time: 2 minutes 38 seconds
C:\Sun\ejbca_3_9_2>

From forum: EjbCA - Dev

Re: EJBCA on JBOSS 6.0

2009-12-11T03:51:03Z

Tomas,

I have created the bug [ECA-1511].
I can spend some time to work on it, but I'm not sure to achieve the result.

I keep you informed.

Best regards,
Christophe.

-----Message d'origine-----
De : Tomas Gustavsson [mailto:tomas@...]
Envoyé : vendredi 11 décembre 2009 12:06
À : ejbca-develop@...
Objet : Re: [Ejbca-develop] EJBCA on JBOSS 6.0

Cool, I did not try JBoss 6, didn't see it was there even.

Go ahead and create an issue (jira.primekey.se), but perhaps it's a "new
feature" or "improvement" since JBoss 6 is a new thing and as such it's
not really a bug.

If you have ideas what libraries to change/fix in EJBCa please let us know.

Cheers,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

Christophe PIJCKE wrote:

> Hello all,
>
> I have made a try to setup ejbca (3.9.2) on the newly available jboss 6.0 (M1).
> I encounter "Failed to create a new SAX parser" issue when deploying.
> I wonder if somebody else has tried this.
>
> Looking to internet, this error seems to come from a difference between libraries from jboss and those provided by ejbca.
>
> Being neither an active developer nor an actor of the ejbca project (actually), May I anyway create a bug relating this issue?
>
> Best regards,
> Christophe.
>
>
>
>
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Return on Information:
> Google Enterprise Search pays you back
> Get the facts.
> http://p.sf.net/sfu/google-dev2dev
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Re: EJBCA on JBOSS 6.0

2009-12-11T03:05:31Z

Cool, I did not try JBoss 6, didn't see it was there even.

Go ahead and create an issue (jira.primekey.se), but perhaps it's a "new
feature" or "improvement" since JBoss 6 is a new thing and as such it's
not really a bug.

If you have ideas what libraries to change/fix in EJBCa please let us know.

Cheers,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

Christophe PIJCKE wrote:

From forum: EjbCA - Dev

EJBCA on JBOSS 6.0

2009-12-11T02:05:21Z

Hello all,

I have made a try to setup ejbca (3.9.2) on the newly available jboss 6.0 (M1).

I encounter “Failed to create a new SAX parser” issue when deploying.

I wonder if somebody else has tried this.

Looking to internet, this error seems to come from a difference between libraries from jboss and those provided by ejbca.

Being neither an active developer nor an actor of the ejbca project (actually), May I anyway create a bug relating this issue?

Best regards,

Christophe.

From forum: EjbCA - Dev

Re: Help on changing server cert name

2009-12-11T01:48:49Z

You can easily issue a new keystore. If you made a "default"
installation before you can simply edit the tomcat user in EJBCA and
change "CN", set password and status to new. You can then batch generate
(bin/ejbca.sh batch) the new tomcat.jks keystore and replace
keystore.jks with this new one.

You can add any new user as you like, and create a jks keystore that can
be used as ssl keystore for a jboss/tomcat server.

Regards,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

khsheh wrote:

> I have been using 1 server with Windows 2003, JBOSS and EJBCA for testing. As
> I need to have 2 servers with EJBCA for tesitng, I cloned the original
> machine to another machine.
>
> But the server certificate inside the keystore.jks is bounded to the
> original machine server name. How can I update the the server cert of the
> new machine with the new server name, in the most simple way, besides
> re-installation of JBOSS and EJBCA? I think I need to use the AdminCA1 to
> sign the server cert. But where is the AdminCA1 private key? Is it stored in
> the truststore.jks? I am not familiar with JKS and keytool command for cert
> manipulation, but I have tried and could not find the private key there.
>
> Your help is much appreciated. Thanks.

From forum: EjbCA - Dev

Help on changing server cert name

2009-12-11T01:21:19Z

I have been using 1 server with Windows 2003, JBOSS and EJBCA for testing. As I need to have 2 servers with EJBCA for tesitng, I cloned the original machine to another machine.

But the server certificate inside the keystore.jks is bounded to the original machine server name. How can I update the the server cert of the new machine with the new server name, in the most simple way, besides re-installation of JBOSS and EJBCA? I think I need to use the AdminCA1 to sign the server cert. But where is the AdminCA1 private key? Is it stored in the truststore.jks? I am not familiar with JKS and keytool command for cert manipulation, but I have tried and could not find the private key there.

Your help is much appreciated. Thanks.

From forum: EjbCA - Dev

[SPAM] Small Business Magazine

2009-11-23T08:07:17Z

DiversityBusiness Member Benefits

Click here to Subscribe Now

From Super Model To Role Model
Cover Story Kathy Ireland

Global Economic Slowdown and Emerging
Economies

The Benefits of Ergonomics in the Workplace

What Women Want
Effective Marketing to Women

A History of Diversity at American Airlines

Tips for Employers to Safeguard against
Workplace Bullying!

From America's Team... to a World of Opportunity
The Evolution of Dallas Fan Fares

While international opportunities abound, companies must get local to succeed
Far beyond translation, localization respects the culture, symbolism and business environment of emerging economies

One Woman's Journey: Logistics with Technology

Bridging the Multicultural Divide in Business
The Essential Role of Communication in the Global Marketplace

Americas Top Organizations for Multicultural Business Opportunities

Multicultural Marketing In a Weak Economy
This may be the Best Opportunity for Growth.

Top 10 Tips For Growing Your Diverse Business
by Carlton L Highsmith Founder and CEO Specialized Packaging Group

How do you get the most bang out of your marketing campaign?

Click here to Subscribe Now

Our Advertisers

You are receiving this since you/or your associates subscribed your email id to receive the newsletter from DiversityBusiness or its affiliates,

To unsubscribe click HERE

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev

Update: TLS/SSL Man In The Middle vulnerability - How does it affect EJBCA?

2009-11-19T06:32:42Z

*TLS/SSL Man In The Middle vulnerability - How does it affect EJBCA?*

This is a follow up on the TLS/SSL MITM vulnerability posting we sent on
the 12th of November.

/Re-cap:/
For about two weeks now a description of a vulnerability in the TLS/SSL
protocol has been circulating around the Internet. This is a status
update on our investigation of this issue and potential consequences
this will have for EJBCA. We will provide you with more information
as soon as we know more.

This vulnerability is not a vulnerability in EJBCA, but in the TLS/SSL
protocol that the EJBCA Admin GUI and Web Services depend on.

/Status update:/
RedHat, Debian, Ubuntu and SuSE, and probably other distributions as
well have now released updated apache httpd packages disabling client
initiated re-negotiation. Server initiated re-negotiation is still
enabled which puts some restrictions on the configuration to be secure.

We are still waiting for information about updates to Tomcat/JBoss.

/Recommendations:/
If access to EJBCA's Admin GUI or Web Services is not protected by other
means in your setup, you could take the following precautions:
- Set up an apache httpd front end to EJBCA (using mod_proxy or mod_jk).
- Make sure you use updated apache packages with client initiated
re-negotiation disabled.
- Make sure that all parts of your site that uses SSL or requires SSL
client certificate authentication has the SSL configuration for the
entire site. In the apache httpd config this means that all SSL
directives must be on the VirtualHost. Do not use any SSL directives in
a Location or Directory directive. Never mix unprotected and protected
pages in the same VirtualHost.
- This means that you probably have to run EJBCA Admin GUI on it's own
sub-domain (admin.ca.yourdomain.com) or on it's own port, i.e. use SSL
client certificate authentication for everything on port 443 (or another
port of your choice).

With these precautions it is our understanding that you will be safe
from this vulnerability.

Best Regards,
The EJBCA support team

--
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://download.primekey.se/documents/ejbca_subscription.pdf
http://download.primekey.se/documents/ejbca_training.pdf

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

smime.p7s (3K) Download Attachment

From forum: EjbCA - Dev

TLS/SSL Man In The Middle vulnerability - How does it affect EJBCA?

2009-11-12T04:02:33Z

*TLS/SSL Man In The Middle vulnerability - How does it affect EJBCA?*

For about a week now a description of a vulnerability in the TLS/SSL
protocol has been circulating around the Internet. This is a status
update on our investigation of this issue and potential consequences
this will have for EJBCA. We will provide you with more information
as soon as we know more.

This vulnerability is not a vulnerability in EJBCA, but in the TLS/SSL
protocol that the EJBCA Admin GUI and Web Services depends on.

/Full descriptions of the vulnerability:/
- http://www.links.org/?p=780
-
http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html

/Cause:/
- The TLS/SSL protocol supports renegotiation by default that could be
initiated by both the client and the server. During renegotiation
plain-text can be injected. The reported issue is a TLS / SSL protocol
flaw, and not a bug of any specific implementation.

/Severity:/
This issue has been rated, by RedHat, as having moderate security impact
as successful exploitation of this flaw requires a man-in-the-middle attack.

/Effect on EJBCA:/
An attacker between an EJBCA administrator's browser / EJBCA Web Service
client and the EJBCA server can inject a request to the EJBCA server
using the administrator's credential (and administrative privileges).
This means that an attacker could do anything in the Admin GUI that
could be done by a single click/request. The attacker cannot fetch any
information using the admin's credential, and a successful attack
requires some knowledge about the victims PKI.

/Current status:/
- The underlying problems in the TLS/SSL protocol will take a
considerable amount of time to fix and roll out.
- PrimeKey has registered a support issue at Red Hat and is awaiting
further information, but from the information we got so far it is clear
that JBoss AS is vulnerable to this attack.
- EJBCA uses the Tomcat server in JBoss AS to serve web pages and web
services. Tomcat relies on the TLS/SSL implementation in Java. According
to Red Hat support they are still investigating this.
- If an Apache front end is used for EJBCA the "mod_ssl" TLS
implementation is the vulnerable part. Red Hat is tracking this as
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3555 .
- RedHat has released updated httpd packages that change mod_ssl to
reject all client-initiated renegotiations, which mitigates this flaw
for the majority of configurations using mod_ssl to provide HTTPS service.

/Recommendations until JBoss/Apache can be configured safely:/
- Administrators and Web Service clients should not connect using
TLS/SSL to EJBCA over an insecure connection. Using SSH, an non-SSL
based VPN solution or physical access might be a solution.
- If using Apache as a front-end to EJBCA, you should make sure that you
update your httpd packages and ensure that client certificates
authentication is used for the whole <VirtualHost> section where EJBCA
admin resides, not only configured in a <Location> or <Directory>
context section.

Best Regards,
The EJBCA support team

--
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://download.primekey.se/documents/ejbca_subscription.pdf
http://download.primekey.se/documents/ejbca_training.pdf

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

smime.p7s (3K) Download Attachment

From forum: EjbCA - Dev

Re: CVC DN's country code in EJBCA

2009-11-11T23:44:14Z

Hi, it is true that the cert-cvc library restricts the use to ISO3166
country codes. It is because this is strictly mandated by the
specification. This will affect any issuance of cvc certificates, both 1
and 2.

I would recommend using your own country code for testing purposes.
(Personally I don't see the rationale behind using fake countries, but
that's just my personal reflection).

If you need to use fake codes you can easily (if you are a java
developer that is), modify the cert-cvc library to skip this check. The
cert-cvc library source code is in the cert-cvc release and the library
is easy to build with a simple 'ant' command. After building a new
library simply replace cert-cvc.jar in ejbca/lib and re-deploy ejbca.

Regards,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

On Wed, 2009-11-11 at 20:58 -0800, khsheh wrote:

> 1. I am using ejbca 3.9.0. I want to create a CVC CVCA using country code say
> "HX" for subject DN but I get the following error:
>
> javax.ejb.EJBException: java.lang.IllegalArgumentException: Unknown country
> code: HX : java.lang.IllegalArgumentException: Unknown country code: HX
>
> I also find that I can use EJBCA to create X.509 cert with country code say
> "HX" for subject DN. It seems that there is no such restriction for X.509
> when using ejbca.
>
> Is EJBCA only support the ISO 3166 standard on 2 character country code for
> CVC and not other testing ones? My purpose is to create some kind of testing
> CVC CVCA cert with fictitious country code.
>
> 2. Moreover, could I process a foreign country's CVC DV CSR request if the
> foreign country use a fictious country code in the CSR?
>
> Thanks.

From forum: EjbCA - Dev

CVC DN's country code in EJBCA

2009-11-11T20:58:33Z

1. I am using ejbca 3.9.0. I want to create a CVC CVCA using country code say "HX" for subject DN but I get the following error:

javax.ejb.EJBException: java.lang.IllegalArgumentException: Unknown country code: HX : java.lang.IllegalArgumentException: Unknown country code: HX

I also find that I can use EJBCA to create X.509 cert with country code say "HX" for subject DN. It seems that there is no such restriction for X.509 when using ejbca.

Is EJBCA only support the ISO 3166 standard on 2 character country code for CVC and not other testing ones? My purpose is to create some kind of testing CVC CVCA cert with fictitious country code.

2. Moreover, could I process a foreign country's CVC DV CSR request if the foreign country use a fictious country code in the CSR?

Thanks.

From forum: EjbCA - Dev

Re: Help on generating IS cert and key

2009-11-04T23:35:05Z

Hi,

that value is used during installation when the server side SSL
certificate is created. In order to change the certificate in an already
installed setup you have to edit the user "tomcat".

What you need to do is the same as for "SSL certificate expire" from the
User Guide at ejbca.org. You need to set the Common Name of the tomcat
user to match you real hostname.

Regards,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://www.primekey.se/Services/Support/
http://www.primekey.se/Services/Training/

On Wed, 2009-11-04 at 22:56 -0800, khsheh wrote:

> Dear Johan,
>
> I just discover there is such a a file web.properties in
> EJBCA_HOME/conf/web.properties.sample.
>
> I copy it to web.properties and no matter whether I set the
> httpsserver.hostname=devnbmbsi03 (which is my workstation name) or
> httpsserver.hostname=localhost, I stilll I get the error of "No name
> matching localhost found".
>
> Would you explain more of what I should do? Is there any documentation of
> it? In the command, "ejbcawsracli edituser isrsa1 foo123 false
> "CN=ISRSA1,C=CN" NULL NULL DV-RSA-1 1 USERGENERATED NEW IS IS", how to
> control which server to connect to? Is there anything I should set in
> C:\jboss\server\default\conf\keystore\truststore.jks like importing anything
> to it?
>
> I now only have 1 workstation, and I have tomcat.jks (devnbmbsi03),
> superadmin.jks (superadmin) and truststore.jks (AdminCA1).
>
> Thanks.
>
> Regards,
> Wilson.
>
>
> Hi khsheh,
>
> When you installed EJBCA you specified a server name that is used in the
> server side SSL certificate ( EJBCA_HOME/conf/web.properties:
> httpsserver.hostname=... ).
>
> You must connect to this hostname or the SSL connection will fail, since
> the serverside is issued for a different host than 'localhost'.
>
> Best Regards,
> Johan
>
>

From forum: EjbCA - Dev

Re: Help on generating IS cert and key

2009-11-04T22:56:38Z

Dear Johan,

I just discover there is such a a file web.properties in EJBCA_HOME/conf/web.properties.sample.

I copy it to web.properties and no matter whether I set the httpsserver.hostname=devnbmbsi03 (which is my workstation name) or httpsserver.hostname=localhost, I stilll I get the error of "No name matching localhost found".

Would you explain more of what I should do? Is there any documentation of it? In the command, "ejbcawsracli edituser isrsa1 foo123 false "CN=ISRSA1,C=CN" NULL NULL DV-RSA-1 1 USERGENERATED NEW IS IS", how to control which server to connect to? Is there anything I should set in C:\jboss\server\default\conf\keystore\truststore.jks like importing anything to it?

I now only have 1 workstation, and I have tomcat.jks (devnbmbsi03), superadmin.jks (superadmin) and truststore.jks (AdminCA1).

Thanks.

Regards,
Wilson.

Hi khsheh,

When you installed EJBCA you specified a server name that is used in the
server side SSL certificate ( EJBCA_HOME/conf/web.properties:
httpsserver.hostname=... ).

You must connect to this hostname or the SSL connection will fail, since
the serverside is issued for a different host than 'localhost'.

Best Regards,
Johan

From forum: EjbCA - Dev

Re: Help on generating IS cert and key

2009-11-04T02:30:16Z

Hi khsheh,

When you installed EJBCA you specified a server name that is used in the
server side SSL certificate ( EJBCA_HOME/conf/web.properties:
httpsserver.hostname=... ).

You must connect to this hostname or the SSL connection will fail, since
the serverside is issued for a different host than 'localhost'.

Best Regards,
Johan

khsheh skrev:

> Thanks. I now set the correct password in ejbcawsracli.properties for
> superadmin.jks, i.e.:
>
> ejbcawsracli.keystore.path = superadmin.jks
> ejbcawsracli.keystore.password = password
>
> But when I run the following command (the ejbca is in the same Windows
> workstation as I type the command):
> ejbcawsracli edituser isrsa1 foo123 false "CN=ISRSA1,C=CN" NULL NULL
> DV-RSA-1 1 USERGENERATED NEW IS IS
>
> I get the following error on localhost issue Do you have any suggestions.
> Sorry that I am new to the keystore and JBOSS areas.
>
> Thanks.
>
> Trying to add user:
> Username: isrsa
> Subject DN: CN=ISRSA1,C=CN
> Subject Altname: null
> Email: null
> CA Name: DV-RSA-1
> Type: 1
> Token: USERGENERATED
> Status: 10
> End entity profile: IS
> Certificate profile: IS
> Hard Token Issuer Alias: NONE
> Start time: NONE
> End time: NONE
> javax.xml.ws.WebServiceException: javax.net.ssl.SSLHandshakeException:
> java.security.cert.CertificateException: No name matching localhost found
> org.ejbca.ui.cli.ErrorAdminCommandException:
> javax.xml.ws.WebServiceException: javax.net.ssl.SSLHandshakeException:
> java.security.cert.CertificateException: No name matching localhost found
> at
> org.ejbca.core.protocol.ws.client.EditUserCommand.execute(EditUserCommand.java:166)
> at
> org.ejbca.core.protocol.ws.client.ejbcawsracli.main(ejbcawsracli.java:34)
> Caused by: javax.xml.ws.WebServiceException:
> javax.net.ssl.SSLHandshakeException:
> java.security.cert.CertificateException: No name matching localhost found
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:162)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parseWSDL(RuntimeWSDLParser.java:188)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parse(RuntimeWSDLParser.java:66)
> at com.sun.xml.ws.wsdl.WSDLContext.<init>(WSDLContext.java:57)
> at
> com.sun.xml.ws.client.ServiceContextBuilder.build(ServiceContextBuilder.java:60)
> at
> com.sun.xml.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:103)
> at
> com.sun.xml.ws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:50)
> at javax.xml.ws.Service.<init>(Service.java:57)
> at
> org.ejbca.core.protocol.ws.client.gen.EjbcaWSService.<init>(EjbcaWSService.java:36)
> at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:205)
> at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:187)
> at
> org.ejbca.core.protocol.ws.client.EditUserCommand.execute(EditUserCommand.java:154)
> ... 1 more
> Caused by: javax.net.ssl.SSLHandshakeException:
> java.security.cert.CertificateException: No name matching localhost found
> at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1611)
> at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187)
> at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181)
> at
> com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1035)
> at
> com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:124)
> at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
> at
> com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1112)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1139)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
> at
> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
> at
> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1041)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
> at java.net.URL.openStream(URL.java:1009)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:159)
> ... 12 more
> Caused by: java.security.cert.CertificateException: No name matching
> localhost found
> at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:210)
> at sun.security.util.HostnameChecker.match(HostnameChecker.java:77)
> at
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:264)
> at
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:250)
> at
> com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1014)
> ... 25 more
>
>
>
> You have configured the wrong keystore or password in
> ejbcawsracli.properties.
>
> the error is clear .-)
>
> Caused by: java.io.IOException: Keystore was tampered with, or password
> was incorrect
>
> Cheers,
> Tomas
>
>
>

--
PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

smime.p7s (3K) Download Attachment

From forum: EjbCA - Dev

Re: Help on generating IS cert and key

2009-11-04T02:12:37Z

Thanks. I now set the correct password in ejbcawsracli.properties for superadmin.jks, i.e.:

ejbcawsracli.keystore.path = superadmin.jks
ejbcawsracli.keystore.password = password

But when I run the following command (the ejbca is in the same Windows workstation as I type the command):
ejbcawsracli edituser isrsa1 foo123 false "CN=ISRSA1,C=CN" NULL NULL DV-RSA-1 1 USERGENERATED NEW IS IS

I get the following error on localhost issue Do you have any suggestions. Sorry that I am new to the keystore and JBOSS areas.

Thanks.

Trying to add user:
Username: isrsa
Subject DN: CN=ISRSA1,C=CN
Subject Altname: null
Email: null
CA Name: DV-RSA-1
Type: 1
Token: USERGENERATED
Status: 10
End entity profile: IS
Certificate profile: IS
Hard Token Issuer Alias: NONE
Start time: NONE
End time: NONE
javax.xml.ws.WebServiceException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching localhost found
org.ejbca.ui.cli.ErrorAdminCommandException: javax.xml.ws.WebServiceException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching localhost found
at org.ejbca.core.protocol.ws.client.EditUserCommand.execute(EditUserCommand.java:166)
at org.ejbca.core.protocol.ws.client.ejbcawsracli.main(ejbcawsracli.java:34)
Caused by: javax.xml.ws.WebServiceException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching localhost found
at com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:162)
at com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parseWSDL(RuntimeWSDLParser.java:188)
at com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parse(RuntimeWSDLParser.java:66)
at com.sun.xml.ws.wsdl.WSDLContext.<init>(WSDLContext.java:57)
at com.sun.xml.ws.client.ServiceContextBuilder.build(ServiceContextBuilder.java:60)
at com.sun.xml.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:103)
at com.sun.xml.ws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:50)
at javax.xml.ws.Service.<init>(Service.java:57)
at org.ejbca.core.protocol.ws.client.gen.EjbcaWSService.<init>(EjbcaWSService.java:36)
at org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:205)
at org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:187)
at org.ejbca.core.protocol.ws.client.EditUserCommand.execute(EditUserCommand.java:154)
... 1 more
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching localhost found
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1611)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1035)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:124)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1112)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1139)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1041)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
at java.net.URL.openStream(URL.java:1009)
at com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:159)
... 12 more
Caused by: java.security.cert.CertificateException: No name matching localhost found
at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:210)
at sun.security.util.HostnameChecker.match(HostnameChecker.java:77)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:264)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:250)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1014)
... 25 more

You have configured the wrong keystore or password in
ejbcawsracli.properties.

the error is clear .-)

Caused by: java.io.IOException: Keystore was tampered with, or password
was incorrect

Cheers,
Tomas

From forum: EjbCA - Dev

SignServer 3.1 released

2009-11-02T04:13:51Z

The PrimeKey SignServer team is happy to announce that SignServer 3.1
has been released! This is a major new version with lots of exciting
functionality for document signing and validation.

Development continues beyond this version and all requests from the
community and from the EJBCA Developer Conference [1] are scheduled for
SignServer 3.2 or later releases.

More information is available at the project web site [2] and the
complete changelog can be viewed in the issue tracker [3].

Release Notes:

* New module system
The byte code for a worker can be packaged as a separate module that can
be loaded and unloaded at runtime.

* New workers: XMLSigner/Validator
Signing and validation of XML documents

* New worker: ODFSigner
Signing OpenDocument Format documents for instance used by OpenOffice.org

* New worker: OOXMLSigner
Signing Office Open XML documents

* New worker: CRLValidator
Validating certificates by looking up certificate revocation lists

* New worker: OCSPValidator
Validating certificates using the online certificate status protocol

* New worker: MRTDSODSigner
Signing EAC ePassports

* Several other features, fixes and improvements

[1] http://www.primekey.se/Community/
[2] http://www.signserver.org
[3] http://jira.primekey.se/browse/DSS

Regards,
The PrimeKey SignServer team

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Ejbca-news mailing list
Ejbca-news@...
https://lists.sourceforge.net/lists/listinfo/ejbca-news

From forum: EjbCA - News

Re: Help on generating IS cert and key

2009-11-02T02:16:35Z

Hi khsheh,

Last cause-by in your stacktraces are:

"Caused by: java.security.UnrecoverableKeyException: Password verification
failed"

Please verify the password use for the client-side SSL keystore.

Best Regards,
Johan

khsheh skrev:

> I am trying to create the IS cert and key. The CVCA documentation say that I
> need to create an end entity for the IS and then use it to create the IS
> cert / key. But I get the following errors when doing so. Is it related to
> my ejbca Web Services being not properly setup or is it related to some
> authentication issue like that in ejbcawsracli.properties? I cannot
> understand the documentaton of how to setup the ejbcawsracli.properties.
> Would you please help how to solve the probelms? My purpose is just to get
> the IS cert and key. Thank you.
>
> 1) Creating an end entity
>
> C:\EJBCA_~1\dist\EJBCAW~1>ejbcawsracli edituser isrsa1 foo123 false
> "CN=ISRSA1,C=CN" NULL NULL DV-RSA-1 1 USERGENERATED NEW IS IS
> Trying to add user:
> Username: isrsa1
> Subject DN: CN=ISRSA1,C=CN
> Subject Altname: null
> Email: null
> CA Name: DV-RSA-1
> Type: 1
> Token: USERGENERATED
> Status: 10
> End entity profile: IS
> Certificate profile: IS
> Hard Token Issuer Alias: NONE
> Start time: NONE
> End time: NONE
> javax.xml.ws.WebServiceException: java.net.SocketException:
> java.security.NoSuchAlgorithmException: Error constructing implementation
> (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> org.ejbca.ui.cli.ErrorAdminCommandException:
> javax.xml.ws.WebServiceException: java.net.SocketException:
> java.security.NoSuchAlgorithmException: Error constructing implementation
> (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at
> org.ejbca.core.protocol.ws.client.EditUserCommand.execute(EditUserCommand.java:166)
> at
> org.ejbca.core.protocol.ws.client.ejbcawsracli.main(ejbcawsracli.java:34)
> Caused by: javax.xml.ws.WebServiceException: java.net.SocketException:
> java.security.NoSuchAlgorithmException: Error constructing implementation
> (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:162)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parseWSDL(RuntimeWSDLParser.java:188)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parse(RuntimeWSDLParser.java:66)
> at com.sun.xml.ws.wsdl.WSDLContext.<init>(WSDLContext.java:57)
> at
> com.sun.xml.ws.client.ServiceContextBuilder.build(ServiceContextBuilder.java:60)
> at
> com.sun.xml.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:103)
> at
> com.sun.xml.ws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:50)
> at javax.xml.ws.Service.<init>(Service.java:57)
> at
> org.ejbca.core.protocol.ws.client.gen.EjbcaWSService.<init>(EjbcaWSService.java:36)
> at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:205)
> at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:187)
> at
> org.ejbca.core.protocol.ws.client.EditUserCommand.execute(EditUserCommand.java:154)
> ... 1 more
> Caused by: java.net.SocketException: java.security.NoSuchAlgorithmException:
> Error constructing implementation (algorithm: Default, provider: SunJSSE,
> class: com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at
> javax.net.ssl.DefaultSSLSocketFactory.throwException(SSLSocketFactory.java:179)
> at
> javax.net.ssl.DefaultSSLSocketFactory.createSocket(SSLSocketFactory.java:186)
> at
> sun.net.www.protocol.https.HttpsClient.createSocket(HttpsClient.java:362)
> at sun.net.NetworkClient.doConnect(NetworkClient.java:145)
> at sun.net.www.http.HttpClient.openServer(HttpClient.java:394)
> at sun.net.www.http.HttpClient.openServer(HttpClient.java:529)
> at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:272)
> at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:329)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:172)
> at
> sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:793)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:158)
> at
> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1041)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
> at java.net.URL.openStream(URL.java:1009)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:159)
> ... 12 more
> Caused by: java.security.NoSuchAlgorithmException: Error constructing
> implementation (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at java.security.Provider$Service.newInstance(Provider.java:1245)
> at sun.security.jca.GetInstance.getInstance(GetInstance.java:220)
> at sun.security.jca.GetInstance.getInstance(GetInstance.java:147)
> at javax.net.ssl.SSLContext.getInstance(SSLContext.java:125)
> at javax.net.ssl.SSLContext.getDefault(SSLContext.java:68)
> at javax.net.ssl.SSLSocketFactory.getDefault(SSLSocketFactory.java:102)
> at
> javax.net.ssl.HttpsURLConnection.getDefaultSSLSocketFactory(HttpsURLConnection.java:325)
> at javax.net.ssl.HttpsURLConnection.<init>(HttpsURLConnection.java:283)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.<init>(HttpsURLConnectionImpl.java:65)
> at sun.net.www.protocol.https.Handler.openConnection(Handler.java:42)
> at sun.net.www.protocol.https.Handler.openConnection(Handler.java:37)
> at java.net.URL.openConnection(URL.java:945)
> ... 14 more
> Caused by: java.io.IOException: Keystore was tampered with, or password was
> incorrect
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
> at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
> at java.security.KeyStore.load(KeyStore.java:1185)
> at
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl.getDefaultKeyManager(DefaultSSLContextImpl.java:150)
> at
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl.<init>(DefaultSSLContextImpl.java:40)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> at
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
> at
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
> at java.lang.Class.newInstance0(Class.java:355)
> at java.lang.Class.newInstance(Class.java:308)
> at java.security.Provider$Service.newInstance(Provider.java:1221)
> ... 25 more
> Caused by: java.security.UnrecoverableKeyException: Password verification
> failed
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:769)
> ... 36 more
>
> 2) Due to the above problem, I have created the end entity using the admin
> web page of Add Entity. But I have the problem of creating the IS cert and
> key as follows:
>
> C:\EJBCA_~1\dist\EJBCAW~1>cvcwscli cvcrequest isrsa foo123 "C=CN,CN=HKIS"
> 00005 SHA1WithRSA 1024 true HKIS
>
> Enrolling user:
> Username: isrsa
> Subject name: C=CN,CN=HKIS
> Sequence: 00005
> Signature algorithm: SHA1WithRSA
> Key spec: 1024
> Generating a new request with base filename: HKIS
> Wrote binary request to: HKIS.cvreq
> Wrote private key in PKCS#8 format to to: HKIS.pkcs8
> Submitting CVC request for user 'isrsa'.
>
> javax.xml.ws.WebServiceException: java.net.SocketException:
> java.security.NoSuchAlgorithmException: Error constructing implementation
> (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> org.ejbca.ui.cli.ErrorAdminCommandException:
> javax.xml.ws.WebServiceException: java.net.SocketException:
> java.security.NoSuchAlgorithmException: Error constructing implementation
> (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at
> org.ejbca.core.protocol.ws.client.CvcRequestCommand.execute(CvcRequestCommand.java:211)
> at org.ejbca.core.protocol.ws.client.cvcwscli.main(cvcwscli.java:30)
> Caused by: javax.xml.ws.WebServiceException: java.net.SocketException:
> java.security.NoSuchAlgorithmException: Error constructing implementation
> (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:162)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parseWSDL(RuntimeWSDLParser.java:188)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.parse(RuntimeWSDLParser.java:66)
> at com.sun.xml.ws.wsdl.WSDLContext.<init>(WSDLContext.java:57)
> at
> com.sun.xml.ws.client.ServiceContextBuilder.build(ServiceContextBuilder.java:60)
> at
> com.sun.xml.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:103)
> at
> com.sun.xml.ws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:50)
> at javax.xml.ws.Service.<init>(Service.java:57)
> at
> org.ejbca.core.protocol.ws.client.gen.EjbcaWSService.<init>(EjbcaWSService.java:36)
> at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:205)
> at
> org.ejbca.core.protocol.ws.client.EJBCAWSRABaseCommand.getEjbcaRAWS(EJBCAWSRABaseCommand.java:187)
> at
> org.ejbca.core.protocol.ws.client.CvcRequestCommand.execute(CvcRequestCommand.java:188)
> ... 1 more
> Caused by: java.net.SocketException: java.security.NoSuchAlgorithmException:
> Error constructing implementation (algorithm: Default, provider: SunJSSE,
> class: com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at
> javax.net.ssl.DefaultSSLSocketFactory.throwException(SSLSocketFactory.java:179)
> at
> javax.net.ssl.DefaultSSLSocketFactory.createSocket(SSLSocketFactory.java:186)
> at
> sun.net.www.protocol.https.HttpsClient.createSocket(HttpsClient.java:362)
> at sun.net.NetworkClient.doConnect(NetworkClient.java:145)
> at sun.net.www.http.HttpClient.openServer(HttpClient.java:394)
> at sun.net.www.http.HttpClient.openServer(HttpClient.java:529)
> at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:272)
> at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:329)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:172)
> at
> sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:793)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:158)
> at
> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1041)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
> at java.net.URL.openStream(URL.java:1009)
> at
> com.sun.xml.ws.wsdl.parser.RuntimeWSDLParser.createReader(RuntimeWSDLParser.java:159)
> ... 12 more
> Caused by: java.security.NoSuchAlgorithmException: Error constructing
> implementation (algorithm: Default, provider: SunJSSE, class:
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl)
> at java.security.Provider$Service.newInstance(Provider.java:1245)
> at sun.security.jca.GetInstance.getInstance(GetInstance.java:220)
> at sun.security.jca.GetInstance.getInstance(GetInstance.java:147)
> at javax.net.ssl.SSLContext.getInstance(SSLContext.java:125)
> at javax.net.ssl.SSLContext.getDefault(SSLContext.java:68)
> at javax.net.ssl.SSLSocketFactory.getDefault(SSLSocketFactory.java:102)
> at
> javax.net.ssl.HttpsURLConnection.getDefaultSSLSocketFactory(HttpsURLConnection.java:325)
> at javax.net.ssl.HttpsURLConnection.<init>(HttpsURLConnection.java:283)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.<init>(HttpsURLConnectionImpl.java:65)
> at sun.net.www.protocol.https.Handler.openConnection(Handler.java:42)
> at sun.net.www.protocol.https.Handler.openConnection(Handler.java:37)
> at java.net.URL.openConnection(URL.java:945)
> ... 14 more
> Caused by: java.io.IOException: Keystore was tampered with, or password was
> incorrect
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
> at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
> at java.security.KeyStore.load(KeyStore.java:1185)
> at
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl.getDefaultKeyManager(DefaultSSLContextImpl.java:150)
> at
> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl.<init>(DefaultSSLContextImpl.java:40)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> at
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
> at
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
> at java.lang.Class.newInstance0(Class.java:355)
> at java.lang.Class.newInstance(Class.java:308)
> at java.security.Provider$Service.newInstance(Provider.java:1221)
> ... 25 more
> Caused by: java.security.UnrecoverableKeyException: Password verification
> failed
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:769)
> ... 36 more
>
> Thanks a lot!
>
>
>
>

--
PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

smime.p7s (3K) Download Attachment

From forum: EjbCA - Dev

Re: Help on generating IS cert and key

2009-11-02T02:15:13Z

You have configured the wrong keystore or password in
ejbcawsracli.properties.

the error is clear .-)

Caused by: java.io.IOException: Keystore was tampered with, or password
was incorrect

Cheers,
Tomas

khsheh wrote:

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

From forum: EjbCA - Dev