<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Titel content=""><meta name=Stichwörter content=""><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Calibri;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-Mail-Formatvorlage17
{mso-style-type:personal-compose;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:Calibri;
mso-fareast-language:EN-US;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body bgcolor=white lang=DE link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt'>Hello,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I installed Dogtag and tried to create a new PKI Instance for the intermediate CA. I used this tutorial (<a href="http://pki.fedoraproject.org/wiki/Installing_CA_with_Externaly-Signed_CA_Certificate)">http://pki.fedoraproject.org/wiki/Installing_CA_with_Externaly-Signed_CA_Certificate)</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>with the same configuration file (I changed the passwords and the ldap/ds configuration). The Root CA is stored offline and not managed through Dogtag. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I ran pkispawn which failed with the following error: <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>[root@ca ~]# pkispawn -f flanga-ssl-g1.conf<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Subsystem (CA/KRA/OCSP/TKS/TPS) [CA]: CA<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Begin installation (Yes/No/Quit)? yes<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Log file: /var/log/pki/pki-ca-spawn.20170507183908.log<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Loading deployment configuration from flanga-ssl-g1.conf.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>pkispawn : ERROR ....... File '/etc/pki/pki-tomcat/ca/CS.cfg' is either missing or is NOT a regular file!<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Traceback (most recent call last):<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> File "/usr/sbin/pkispawn", line 817, in <module><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> main(sys.argv)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> File "/usr/sbin/pkispawn", line 501, in main<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> create_master_dictionary(parser)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> File "/usr/sbin/pkispawn", line 641, in create_master_dictionary<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> parser.compose_pki_master_dictionary()<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> File "/usr/lib/python2.7/site-packages/pki/server/deployment/pkiparser.py", line 690, in compose_pki_master_dictionary<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> raise Exception(log.PKI_FILE_MISSING_OR_NOT_A_FILE_1)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Exception: File '%s' is either missing or is NOT a regular file!<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I did not create another Dogtag instance before.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Thank you for the help!<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Best regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Moritz<o:p></o:p></span></p></div></body></html>