<div class="gmail_quote">---------- 已转发邮件 ---------- 发件人： RD@WoSign <<a href="mailto:rd@wosign.com">rd@wosign.com</a>> 日期： 2011年1月13日上午10:31 主题： pki-dogtag operation(ca , subca) 收件人： <a href="mailto:pki-devel@redhat.com">pki-devel@redhat.com</a>, <a href="mailto:pki-devel-request@redhat.com">pki-devel-request@redhat.com</a> hi,all, I have installed Dogtag Certificate System by pki_install_guide,include ca, subca, kra, ocsp,tks,ra and tps, configure is finished. i have problem in using the Dogtag Certificate Sytem, there many main requestes follow. note: my test domain is <a href="http://wotest.com" target="_blank">wotest.com</a> , operate platform is fedora 13 1. after pkicreate and configure,Enrollment Certificate by URL <a href="https://wotest.com:9444/ca/ee/ca/" target="_blank">https://wotest.com:9444/ca/ee/ca/</a> and Issue Certifite are OK, but i access subca Agent Service, can't fetch the subca's Certificate Enrollment submited by SSL END USER SERVICES(<a href="https://wotest.com:9544/ca/ee/ca" target="_blank">https://wotest.com:9544/ca/ee/ca</a>/). Subca's Agent Service Click <a href="https://wotest.com:9443/ca/agent/ca/frameListReq.html" target="_blank">List Requests</a> display : Problem Processing Your Request <table style="background-color: rgb(255, 255, 255); color: rgb(153, 153, 255);" width="100%" background="http://ca/agent/graphics/hr.gif" border="0" cellpadding="0" cellspacing="0"> <tbody><tr> <td> </td></tr></tbody></table>The Certificate Manager encountered an unexpected error while processing your request. The following is a detailed message of the error that occurred. Invalid Credential. Please consult your local administrator for further assistance. The Certificate System logs may provide further information. 2. if I restart fc13 and execute the "service pki-cad start " ,display: pki-ca (pid 3386) is running ... Unsecure Port = <a href="http://wotest.com:9180/ca/ee/ca" target="_blank">http://wotest.com:9180/ca/ee/ca</a> Secure Agent Port = <a href="https://wotest.com:9443/ca/agent/ca" target="_blank">https://wotest.com:9443/ca/agent/ca</a> Secure EE Port = <a href="https://wotest.com:9444/ca/ee/ca" target="_blank">https://wotest.com:9444/ca/ee/ca</a> Secure Admin Port = <a href="https://wotest.com:9445/ca/services" target="_blank">https://wotest.com:9445/ca/services</a> EE Client Auth Port = <a href="https://wotest.com:9446/ca/eeca/ca" target="_blank">https://wotest.com:9446/ca/eeca/ca</a> PKI Console Port = pkiconsole <a href="https://wotest.com:9445/ca" target="_blank">https://wotest.com:9445/ca</a> Tomcat Port = 9701 (for shutdown) PKI Instance Name: pki-ca PKI Subsystem Type: Root CA (Security Domain) Registered PKI Security Domain Information: ========================================================================== Name: wotest URL: <a href="https://wotest.com:9445" target="_blank">https://wotest.com:9445</a> ========================================================================== [root@woto jeff]# service pki-cad start pki-subca Starting pki-subca: [OK] pki-subca (pid 4341) is running ... Unsecure Port = <a href="http://wotest.com:9580/ca/ee/ca" target="_blank">http://wotest.com:9580/ca/ee/ca</a> Secure Agent Port = <a href="https://wotest.com:9543/ca/agent/ca" target="_blank">https://wotest.com:9543/ca/agent/ca</a> Secure EE Port = https:/<a href="http://wotest.com:9544/ca/ee/ca" target="_blank">wotest.com:9544/ca/ee/ca</a> Secure Admin Port = <a href="https://wotest.com:9545/ca/services" target="_blank">https://wotest.com:9545/ca/services</a> EE Client Auth Port = <a href="https://wotest.com:9546/ca/eeca/ca" target="_blank">https://wotest.com:9546/ca/eeca/ca</a> PKI Console Port = pkiconsole <a href="https://wotest.com:9545/ca" target="_blank">https://wotest.com:9545/ca</a> Tomcat Port = 9801 (for shutdown) PKI Instance Name: pki-subca PKI Subsystem Type: Subordinate CA Registered PKI Security Domain Information: ========================================================================== Name: wotest URL: <a href="https://wotest.com:9445" target="_blank">https://wotest.com:9445</a> ========================================================================== if i access Agent Services in CA or SUBCA, Click <a href="https://wotest.com:9443/ca/agent/ca/frameListReq.html" target="_blank">List Requests</a> display : Problem Processing Your Request <table style="background-color: rgb(255, 255, 255); color: rgb(153, 153, 255);" width="100%" background="http://ca/agent/graphics/hr.gif" border="0" cellpadding="0" cellspacing="0"> <tbody><tr> <td> </td></tr></tbody> </table> The Certificate Manager encountered an unexpected error while processing your request. The following is a detailed message of the error that occurred. Invalid Credential. Please consult your local administrator for further assistance. The Certificate System logs may provide further information. So, we can't go on, please tell me what's the problem, and how to do? thanks a lot. -- Best Regards, jeff </div>