From rashmeepawar at gmail.com Wed Sep 2 02:48:43 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Wed, 2 Sep 2009 08:18:43 +0530 Subject: [Pki-users] Apache for Dogtag Message-ID: <816962df0909011948r628089abwae386f68f7faa925@mail.gmail.com> Thank you Chandrasekar for your prompt and informative response. I asked if apache or secure apache is required for dogtag implementation because at the end of the web page http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it has been mentioned that RA and TPS subsystems require Apache web server, hence the question as to what all daemons and rpms need to be installed and configured before starting installing and configuring PKI subsytsems. On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan wrote: > On 09/01/2009 09:43 AM, Rashmi Pawar wrote: > > > > I want to install all the 6 PKI subsystems for dogtag implementation, > > > right. yum -y install pki-ca pki-tks pki-tps pki-ra pki-ocsp pki-kra > is all you need to do. It will pull in httpd,tomcat5 etc... > > do i need to configure apache or secure apache. > > > What is this for ? > > > > > Thanks in advance. > > > > > On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan wrote: > >> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >> >> Hi Chandrasekar, >> >> Thank you for your reply. >> One quick question..As you said i dont need to install and run Apache >> if pki-tps and pki-ra subsystems are not installed...My question is even if >> i am not installing pki-ra and pki-tps subsystems can i still go with >> apache? >> >> >> can u explain what you will use apache for .. in this case ?.. >> >> >> Regards, >> Rashmi Pawar >> On Sun, Aug 30, 2009 at 9:30 PM, wrote: >> >>> Send Pki-users mailing list submissions to >>> pki-users at redhat.com >>> >>> To subscribe or unsubscribe via the World Wide Web, visit >>> https://www.redhat.com/mailman/listinfo/pki-users >>> or, via email, send a message with subject or body 'help' to >>> pki-users-request at redhat.com >>> >>> You can reach the person managing the list at >>> pki-users-owner at redhat.com >>> >>> When replying, please edit your Subject line so it is more specific >>> than "Re: Contents of Pki-users digest..." >>> >>> >>> Today's Topics: >>> >>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>> 2. Re: Dogtag Installation on FC6 (Chandrasekar Kannan) >>> >>> >>> ---------------------------------------------------------------------- >>> >>> Message: 1 >>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>> From: Rashmi Pawar >>> Subject: [Pki-users] Dogtag Installation on FC6 >>> To: pki-users at redhat.com >>> Message-ID: >>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com> >>> Content-Type: text/plain; charset="iso-8859-1" >>> >>> Hi >>> >>> I am new to the Dogtag Certificate system. I have to install the dogtag >>> certificate system on fedora core 6. I would appreciate help from >>> pki-users >>> who have successfully installed and are runing dogtag certificate system >>> on >>> linux. >>> I read the explanantion on dogtag on >>> http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>> questions >>> before starting the installation. Following are the questions: >>> >>> 1. Do I have to install and run Apache service on the system on which I >>> am >>> going to implement dogtag? >>> 2. I am confused about the configuration of all the PKI subsystems like >>> CA,RA,DRM...etc. In the http://pki.fedoraproject.org/wiki/PKI_Main_Pagethe >>> configuration of all subsyems is given but I dont understand from where >>> do I >>> get the configuration URL for each subsystem. >>> 3. I have to integrate the setup with Checkpoint, so need steps on the >>> integration. >>> >>> I would appreciate if someone who has implemented dogtag would provide me >>> easy steps to install dogtag on fedora core 6. >>> >>> Thanks & Regards, >>> Rashmi >>> -------------- next part -------------- >>> An HTML attachment was scrubbed... >>> URL: >>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>> >>> ------------------------------ >>> >>> Message: 2 >>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>> From: Chandrasekar Kannan >>> Subject: Re: [Pki-users] Dogtag Installation on FC6 >>> To: Rashmi Pawar >>> Cc: pki-users at redhat.com >>> Message-ID: <4A9A8CEB.1080404 at redhat.com> >>> Content-Type: text/plain; charset="iso-8859-1" >>> >>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>> > Hi >>> > I am new to the Dogtag Certificate system. I have to install the >>> > dogtag certificate system on fedora core 6. I would appreciate help >>> > from pki-users who have successfully installed and are runing dogtag >>> > certificate system on linux. >>> > I read the explanantion on dogtag on >>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>> > questions before starting the installation. Following are the >>> questions: >>> > 1. Do I have to install and run Apache service on the system on >>> > which I am going to implement dogtag? >>> >>> not unless you need pki-tps or pki-ra subsystems. For pki-ca, pki-tks, >>> pki-ocsp, pki-kra you just need tomcat5. >>> >>> > 2. I am confused about the configuration of all the PKI subsystems >>> > like CA,RA,DRM...etc. In the >>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page the configuration of >>> > all subsyems is given but I dont understand from where do I get the >>> > configuration URL for each subsystem. >>> >>> for example, once you run yum install pki-ca, the rpm post install >>> scripts run /usr/bin/pkicreate utility to create the default instance. >>> Upon creation of this default instance, pkicreate spits out the url for >>> configuration. >>> >>> >>> > 3. I have to integrate the setup with Checkpoint, so need steps on the >>> > integration. >>> no idea. >>> >>> > I would appreciate if someone who has implemented dogtag would provide >>> > me easy steps to install dogtag on fedora core 6. >>> > Thanks & Regards, >>> > Rashmi >>> > >>> ------------------------------------------------------------------------ >>> > >>> > _______________________________________________ >>> > Pki-users mailing list >>> > Pki-users at redhat.com >>> > https://www.redhat.com/mailman/listinfo/pki-users >>> > >>> >>> -------------- next part -------------- >>> An HTML attachment was scrubbed... >>> URL: >>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>> >>> ------------------------------ >>> >>> _______________________________________________ >>> Pki-users mailing list >>> Pki-users at redhat.com >>> https://www.redhat.com/mailman/listinfo/pki-users >>> >>> >>> End of Pki-users Digest, Vol 18, Issue 6 >>> **************************************** >>> >> >> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ckannan at redhat.com Wed Sep 2 03:10:39 2009 From: ckannan at redhat.com (Chandrasekar Kannan) Date: Tue, 01 Sep 2009 20:10:39 -0700 Subject: [Pki-users] Re: Apache for Dogtag In-Reply-To: <816962df0909011948r628089abwae386f68f7faa925@mail.gmail.com> References: <816962df0909011948r628089abwae386f68f7faa925@mail.gmail.com> Message-ID: <4A9DE22F.2020608@redhat.com> On 09/01/2009 07:48 PM, Rashmi Pawar wrote: > Thank you Chandrasekar for your prompt and informative response. > I asked if apache or secure apache is required for dogtag > implementation because at the end of the web page > http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it has been > mentioned that RA and TPS subsystems require Apache web server, > hence the question as to what all daemons and rpms need to be > installed and configured before starting installing and configuring > PKI subsytsems. ah ok. yeah apache is required. but if you do yum -y install pki-tps pki-ra yum will pull in and install all the dependencies for you. httpd - apache webserver is one of them. no other action is required. > > On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan > > wrote: > > On 09/01/2009 09:43 AM, Rashmi Pawar wrote: >> I want to install all the 6 PKI subsystems for dogtag implementation, > > right. yum -y install pki-ca pki-tks pki-tps pki-ra pki-ocsp pki-kra > is all you need to do. It will pull in httpd,tomcat5 etc... > > >> do i need to configure apache or secure apache. > > What is this for ? > > > >> Thanks in advance. >> >> >> On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan >> > wrote: >> >> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >>> Hi Chandrasekar, >>> Thank you for your reply. >>> One quick question..As you said i dont need to install >>> and run Apache if pki-tps and pki-ra subsystems are not >>> installed...My question is even if i am not installing >>> pki-ra and pki-tps subsystems can i still go with apache? >> >> can u explain what you will use apache for .. in this case ?.. >> >>> Regards, >>> Rashmi Pawar >>> On Sun, Aug 30, 2009 at 9:30 PM, >>> >> > wrote: >>> >>> Send Pki-users mailing list submissions to >>> pki-users at redhat.com >>> >>> To subscribe or unsubscribe via the World Wide Web, visit >>> https://www.redhat.com/mailman/listinfo/pki-users >>> or, via email, send a message with subject or body 'help' to >>> pki-users-request at redhat.com >>> >>> >>> You can reach the person managing the list at >>> pki-users-owner at redhat.com >>> >>> >>> When replying, please edit your Subject line so it is >>> more specific >>> than "Re: Contents of Pki-users digest..." >>> >>> >>> Today's Topics: >>> >>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>> 2. Re: Dogtag Installation on FC6 (Chandrasekar Kannan) >>> >>> >>> ---------------------------------------------------------------------- >>> >>> Message: 1 >>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>> From: Rashmi Pawar >> > >>> Subject: [Pki-users] Dogtag Installation on FC6 >>> To: pki-users at redhat.com >>> Message-ID: >>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com >>> > >>> Content-Type: text/plain; charset="iso-8859-1" >>> >>> Hi >>> >>> I am new to the Dogtag Certificate system. I have to >>> install the dogtag >>> certificate system on fedora core 6. I would appreciate >>> help from pki-users >>> who have successfully installed and are runing dogtag >>> certificate system on >>> linux. >>> I read the explanantion on dogtag on >>> http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I >>> have some questions >>> before starting the installation. Following are the >>> questions: >>> >>> 1. Do I have to install and run Apache service on the >>> system on which I am >>> going to implement dogtag? >>> 2. I am confused about the configuration of all the PKI >>> subsystems like >>> CA,RA,DRM...etc. In the >>> http://pki.fedoraproject.org/wiki/PKI_Main_Page the >>> configuration of all subsyems is given but I dont >>> understand from where do I >>> get the configuration URL for each subsystem. >>> 3. I have to integrate the setup with Checkpoint, so >>> need steps on the >>> integration. >>> >>> I would appreciate if someone who has implemented dogtag >>> would provide me >>> easy steps to install dogtag on fedora core 6. >>> >>> Thanks & Regards, >>> Rashmi >>> -------------- next part -------------- >>> An HTML attachment was scrubbed... >>> URL: >>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>> >>> ------------------------------ >>> >>> Message: 2 >>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>> From: Chandrasekar Kannan >> > >>> Subject: Re: [Pki-users] Dogtag Installation on FC6 >>> To: Rashmi Pawar >> > >>> Cc: pki-users at redhat.com >>> Message-ID: <4A9A8CEB.1080404 at redhat.com >>> > >>> Content-Type: text/plain; charset="iso-8859-1" >>> >>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>> > Hi >>> > I am new to the Dogtag Certificate system. I have to >>> install the >>> > dogtag certificate system on fedora core 6. I would >>> appreciate help >>> > from pki-users who have successfully installed and are >>> runing dogtag >>> > certificate system on linux. >>> > I read the explanantion on dogtag on >>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I >>> have some >>> > questions before starting the installation. Following >>> are the questions: >>> > 1. Do I have to install and run Apache service on the >>> system on >>> > which I am going to implement dogtag? >>> >>> not unless you need pki-tps or pki-ra subsystems. For >>> pki-ca, pki-tks, >>> pki-ocsp, pki-kra you just need tomcat5. >>> >>> > 2. I am confused about the configuration of all the >>> PKI subsystems >>> > like CA,RA,DRM...etc. In the >>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page the >>> configuration of >>> > all subsyems is given but I dont understand from where >>> do I get the >>> > configuration URL for each subsystem. >>> >>> for example, once you run yum install pki-ca, the rpm >>> post install >>> scripts run /usr/bin/pkicreate utility to create the >>> default instance. >>> Upon creation of this default instance, pkicreate spits >>> out the url for >>> configuration. >>> >>> >>> > 3. I have to integrate the setup with Checkpoint, so >>> need steps on the >>> > integration. >>> no idea. >>> >>> > I would appreciate if someone who has implemented >>> dogtag would provide >>> > me easy steps to install dogtag on fedora core 6. >>> > Thanks & Regards, >>> > Rashmi >>> > >>> ------------------------------------------------------------------------ >>> > >>> > _______________________________________________ >>> > Pki-users mailing list >>> > Pki-users at redhat.com >>> > https://www.redhat.com/mailman/listinfo/pki-users >>> > >>> >>> -------------- next part -------------- >>> An HTML attachment was scrubbed... >>> URL: >>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>> >>> ------------------------------ >>> >>> _______________________________________________ >>> Pki-users mailing list >>> Pki-users at redhat.com >>> https://www.redhat.com/mailman/listinfo/pki-users >>> >>> >>> End of Pki-users Digest, Vol 18, Issue 6 >>> **************************************** >>> >>> >> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rashmeepawar at gmail.com Wed Sep 2 03:27:50 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Wed, 2 Sep 2009 08:57:50 +0530 Subject: [Pki-users] Re: Apache for Dogtag In-Reply-To: <4A9DE22F.2020608@redhat.com> References: <816962df0909011948r628089abwae386f68f7faa925@mail.gmail.com> <4A9DE22F.2020608@redhat.com> Message-ID: <816962df0909012027j2c886e7fi6ef95c35bd955015@mail.gmail.com> ok.. thanks a lot... On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan wrote: > On 09/01/2009 07:48 PM, Rashmi Pawar wrote: > > > > Thank you Chandrasekar for your prompt and informative response. > > I asked if apache or secure apache is required for dogtag implementation > because at the end of the web page > http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it has been > mentioned that RA and TPS subsystems require Apache web server, > hence the question as to what all daemons and rpms need to be installed and > configured before starting installing and configuring PKI subsytsems. > > > ah ok. yeah apache is required. but if you do > yum -y install pki-tps pki-ra > > yum will pull in and install all the dependencies for you. > httpd - apache webserver is one of them. > > no other action is required. > > > > > > > > On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan wrote: > >> On 09/01/2009 09:43 AM, Rashmi Pawar wrote: >> >> >> >> I want to install all the 6 PKI subsystems for dogtag implementation, >> >> >> right. yum -y install pki-ca pki-tks pki-tps pki-ra pki-ocsp pki-kra >> is all you need to do. It will pull in httpd,tomcat5 etc... >> >> do i need to configure apache or secure apache. >> >> >> What is this for ? >> >> >> >> Thanks in advance. >> >> >> >> >> On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan wrote: >> >>> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >>> >>> Hi Chandrasekar, >>> >>> Thank you for your reply. >>> One quick question..As you said i dont need to install and run Apache >>> if pki-tps and pki-ra subsystems are not installed...My question is even if >>> i am not installing pki-ra and pki-tps subsystems can i still go with >>> apache? >>> >>> >>> can u explain what you will use apache for .. in this case ?.. >>> >>> >>> Regards, >>> Rashmi Pawar >>> On Sun, Aug 30, 2009 at 9:30 PM, wrote: >>> >>>> Send Pki-users mailing list submissions to >>>> pki-users at redhat.com >>>> >>>> To subscribe or unsubscribe via the World Wide Web, visit >>>> https://www.redhat.com/mailman/listinfo/pki-users >>>> or, via email, send a message with subject or body 'help' to >>>> pki-users-request at redhat.com >>>> >>>> You can reach the person managing the list at >>>> pki-users-owner at redhat.com >>>> >>>> When replying, please edit your Subject line so it is more specific >>>> than "Re: Contents of Pki-users digest..." >>>> >>>> >>>> Today's Topics: >>>> >>>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>>> 2. Re: Dogtag Installation on FC6 (Chandrasekar Kannan) >>>> >>>> >>>> ---------------------------------------------------------------------- >>>> >>>> Message: 1 >>>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>>> From: Rashmi Pawar >>>> Subject: [Pki-users] Dogtag Installation on FC6 >>>> To: pki-users at redhat.com >>>> Message-ID: >>>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com> >>>> Content-Type: text/plain; charset="iso-8859-1" >>>> >>>> Hi >>>> >>>> I am new to the Dogtag Certificate system. I have to install the dogtag >>>> certificate system on fedora core 6. I would appreciate help from >>>> pki-users >>>> who have successfully installed and are runing dogtag certificate system >>>> on >>>> linux. >>>> I read the explanantion on dogtag on >>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>>> questions >>>> before starting the installation. Following are the questions: >>>> >>>> 1. Do I have to install and run Apache service on the system on which I >>>> am >>>> going to implement dogtag? >>>> 2. I am confused about the configuration of all the PKI subsystems like >>>> CA,RA,DRM...etc. In the http://pki.fedoraproject.org/wiki/PKI_Main_Pagethe >>>> configuration of all subsyems is given but I dont understand from where >>>> do I >>>> get the configuration URL for each subsystem. >>>> 3. I have to integrate the setup with Checkpoint, so need steps on the >>>> integration. >>>> >>>> I would appreciate if someone who has implemented dogtag would provide >>>> me >>>> easy steps to install dogtag on fedora core 6. >>>> >>>> Thanks & Regards, >>>> Rashmi >>>> -------------- next part -------------- >>>> An HTML attachment was scrubbed... >>>> URL: >>>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>>> >>>> ------------------------------ >>>> >>>> Message: 2 >>>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>>> From: Chandrasekar Kannan >>>> Subject: Re: [Pki-users] Dogtag Installation on FC6 >>>> To: Rashmi Pawar >>>> Cc: pki-users at redhat.com >>>> Message-ID: <4A9A8CEB.1080404 at redhat.com> >>>> Content-Type: text/plain; charset="iso-8859-1" >>>> >>>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>>> > Hi >>>> > I am new to the Dogtag Certificate system. I have to install the >>>> > dogtag certificate system on fedora core 6. I would appreciate help >>>> > from pki-users who have successfully installed and are runing dogtag >>>> > certificate system on linux. >>>> > I read the explanantion on dogtag on >>>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>>> > questions before starting the installation. Following are the >>>> questions: >>>> > 1. Do I have to install and run Apache service on the system on >>>> > which I am going to implement dogtag? >>>> >>>> not unless you need pki-tps or pki-ra subsystems. For pki-ca, pki-tks, >>>> pki-ocsp, pki-kra you just need tomcat5. >>>> >>>> > 2. I am confused about the configuration of all the PKI subsystems >>>> > like CA,RA,DRM...etc. In the >>>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page the configuration of >>>> > all subsyems is given but I dont understand from where do I get the >>>> > configuration URL for each subsystem. >>>> >>>> for example, once you run yum install pki-ca, the rpm post install >>>> scripts run /usr/bin/pkicreate utility to create the default instance. >>>> Upon creation of this default instance, pkicreate spits out the url for >>>> configuration. >>>> >>>> >>>> > 3. I have to integrate the setup with Checkpoint, so need steps on the >>>> > integration. >>>> no idea. >>>> >>>> > I would appreciate if someone who has implemented dogtag would provide >>>> > me easy steps to install dogtag on fedora core 6. >>>> > Thanks & Regards, >>>> > Rashmi >>>> > >>>> ------------------------------------------------------------------------ >>>> > >>>> > _______________________________________________ >>>> > Pki-users mailing list >>>> > Pki-users at redhat.com >>>> > https://www.redhat.com/mailman/listinfo/pki-users >>>> > >>>> >>>> -------------- next part -------------- >>>> An HTML attachment was scrubbed... >>>> URL: >>>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>>> >>>> ------------------------------ >>>> >>>> _______________________________________________ >>>> Pki-users mailing list >>>> Pki-users at redhat.com >>>> https://www.redhat.com/mailman/listinfo/pki-users >>>> >>>> >>>> End of Pki-users Digest, Vol 18, Issue 6 >>>> **************************************** >>>> >>> >>> >>> >> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ckannan at redhat.com Fri Sep 4 13:06:51 2009 From: ckannan at redhat.com (Chandrasekar Kannan) Date: Fri, 04 Sep 2009 06:06:51 -0700 Subject: [Pki-users] Re: Error 46 Credentials not generated In-Reply-To: <816962df0909040216w6c5c7eb8w813de2c2c5722238@mail.gmail.com> References: <816962df0909040216w6c5c7eb8w813de2c2c5722238@mail.gmail.com> Message-ID: <4AA110EB.30206@redhat.com> On 09/04/2009 02:16 AM, Rashmi Pawar wrote: > Hi when i configured subsystem pki-ca i got he error "Error 46 > Cerendentials not generated" > Please find the attached file that shows the error... I don't believe we support IE for the administration interface. If possible, please try with firefox. > > On Wed, Sep 2, 2009 at 8:57 AM, Rashmi Pawar > wrote: > > ok.. > thanks a lot... > > On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan > > wrote: > > On 09/01/2009 07:48 PM, Rashmi Pawar wrote: >> Thank you Chandrasekar for your prompt and informative response. >> I asked if apache or secure apache is required for dogtag >> implementation because at the end of the web page >> http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it >> has been mentioned that RA and TPS subsystems require Apache >> web server, >> hence the question as to what all daemons and rpms need to be >> installed and configured before starting installing and >> configuring PKI subsytsems. > > ah ok. yeah apache is required. but if you do > yum -y install pki-tps pki-ra > > yum will pull in and install all the dependencies for you. > httpd - apache webserver is one of them. > > no other action is required. > > > >> >> On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan >> > wrote: >> >> On 09/01/2009 09:43 AM, Rashmi Pawar wrote: >>> I want to install all the 6 PKI subsystems for dogtag >>> implementation, >> >> right. yum -y install pki-ca pki-tks pki-tps pki-ra >> pki-ocsp pki-kra >> is all you need to do. It will pull in httpd,tomcat5 etc... >> >> >>> do i need to configure apache or secure apache. >> >> What is this for ? >> >> >> >>> Thanks in advance. >>> >>> >>> On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan >>> > wrote: >>> >>> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >>>> Hi Chandrasekar, >>>> Thank you for your reply. >>>> One quick question..As you said i dont need to >>>> install and run Apache if pki-tps and pki-ra >>>> subsystems are not installed...My question is even >>>> if i am not installing pki-ra and pki-tps >>>> subsystems can i still go with apache? >>> >>> can u explain what you will use apache for .. in >>> this case ?.. >>> >>>> Regards, >>>> Rashmi Pawar >>>> On Sun, Aug 30, 2009 at 9:30 PM, >>>> >>> > wrote: >>>> >>>> Send Pki-users mailing list submissions to >>>> pki-users at redhat.com >>>> >>>> To subscribe or unsubscribe via the World Wide >>>> Web, visit >>>> https://www.redhat.com/mailman/listinfo/pki-users >>>> or, via email, send a message with subject or >>>> body 'help' to >>>> pki-users-request at redhat.com >>>> >>>> >>>> You can reach the person managing the list at >>>> pki-users-owner at redhat.com >>>> >>>> >>>> When replying, please edit your Subject line so >>>> it is more specific >>>> than "Re: Contents of Pki-users digest..." >>>> >>>> >>>> Today's Topics: >>>> >>>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>>> 2. Re: Dogtag Installation on FC6 >>>> (Chandrasekar Kannan) >>>> >>>> >>>> ---------------------------------------------------------------------- >>>> >>>> Message: 1 >>>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>>> From: Rashmi Pawar >>> > >>>> Subject: [Pki-users] Dogtag Installation on FC6 >>>> To: pki-users at redhat.com >>>> >>>> Message-ID: >>>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com >>>> > >>>> Content-Type: text/plain; charset="iso-8859-1" >>>> >>>> Hi >>>> >>>> I am new to the Dogtag Certificate system. I >>>> have to install the dogtag >>>> certificate system on fedora core 6. I would >>>> appreciate help from pki-users >>>> who have successfully installed and are runing >>>> dogtag certificate system on >>>> linux. >>>> I read the explanantion on dogtag on >>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>> yet I have some questions >>>> before starting the installation. Following are >>>> the questions: >>>> >>>> 1. Do I have to install and run Apache service >>>> on the system on which I am >>>> going to implement dogtag? >>>> 2. I am confused about the configuration of all >>>> the PKI subsystems like >>>> CA,RA,DRM...etc. In the >>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page the >>>> configuration of all subsyems is given but I >>>> dont understand from where do I >>>> get the configuration URL for each subsystem. >>>> 3. I have to integrate the setup with >>>> Checkpoint, so need steps on the >>>> integration. >>>> >>>> I would appreciate if someone who has >>>> implemented dogtag would provide me >>>> easy steps to install dogtag on fedora core 6. >>>> >>>> Thanks & Regards, >>>> Rashmi >>>> -------------- next part -------------- >>>> An HTML attachment was scrubbed... >>>> URL: >>>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>>> >>>> ------------------------------ >>>> >>>> Message: 2 >>>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>>> From: Chandrasekar Kannan >>> > >>>> Subject: Re: [Pki-users] Dogtag Installation on FC6 >>>> To: Rashmi Pawar >>> > >>>> Cc: pki-users at redhat.com >>>> >>>> Message-ID: <4A9A8CEB.1080404 at redhat.com >>>> > >>>> Content-Type: text/plain; charset="iso-8859-1" >>>> >>>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>>> > Hi >>>> > I am new to the Dogtag Certificate system. I >>>> have to install the >>>> > dogtag certificate system on fedora core 6. I >>>> would appreciate help >>>> > from pki-users who have successfully >>>> installed and are runing dogtag >>>> > certificate system on linux. >>>> > I read the explanantion on dogtag on >>>> > >>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>> yet I have some >>>> > questions before starting the installation. >>>> Following are the questions: >>>> > 1. Do I have to install and run Apache >>>> service on the system on >>>> > which I am going to implement dogtag? >>>> >>>> not unless you need pki-tps or pki-ra >>>> subsystems. For pki-ca, pki-tks, >>>> pki-ocsp, pki-kra you just need tomcat5. >>>> >>>> > 2. I am confused about the configuration of >>>> all the PKI subsystems >>>> > like CA,RA,DRM...etc. In the >>>> > >>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>> the configuration of >>>> > all subsyems is given but I dont understand >>>> from where do I get the >>>> > configuration URL for each subsystem. >>>> >>>> for example, once you run yum install pki-ca, >>>> the rpm post install >>>> scripts run /usr/bin/pkicreate utility to >>>> create the default instance. >>>> Upon creation of this default instance, >>>> pkicreate spits out the url for >>>> configuration. >>>> >>>> >>>> > 3. I have to integrate the setup with >>>> Checkpoint, so need steps on the >>>> > integration. >>>> no idea. >>>> >>>> > I would appreciate if someone who has >>>> implemented dogtag would provide >>>> > me easy steps to install dogtag on fedora core 6. >>>> > Thanks & Regards, >>>> > Rashmi >>>> > >>>> ------------------------------------------------------------------------ >>>> > >>>> > _______________________________________________ >>>> > Pki-users mailing list >>>> > Pki-users at redhat.com >>>> >>>> > https://www.redhat.com/mailman/listinfo/pki-users >>>> > >>>> >>>> -------------- next part -------------- >>>> An HTML attachment was scrubbed... >>>> URL: >>>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>>> >>>> ------------------------------ >>>> >>>> _______________________________________________ >>>> Pki-users mailing list >>>> Pki-users at redhat.com >>>> https://www.redhat.com/mailman/listinfo/pki-users >>>> >>>> >>>> End of Pki-users Digest, Vol 18, Issue 6 >>>> **************************************** >>>> >>>> >>> >>> >> >> > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rashmeepawar at gmail.com Tue Sep 8 05:47:35 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Tue, 8 Sep 2009 11:17:35 +0530 Subject: [Pki-users] How to completely remove all traces of pki subsystem Message-ID: <816962df0909072247h2a016b41w8f20e7ca252a96b@mail.gmail.com> Hi, I tried using firefox for configuration but was not successfull. As i got the error 46 on web browser and could not resolve the error I uninstalled all the pki subsystems, again when i installed the pki susbsytems say pki-ca a new instance file /var/log/pki-ca-install.log was not created.. Please advice me how to completely remove all traces, instances of pki-subsystems..as i tried pkiremove and pkicreate to remove and create the instance and log file...but was unsuccessfull. Thanks. Regards. Rsahmi On Fri, Sep 4, 2009 at 6:36 PM, Chandrasekar Kannan wrote: > On 09/04/2009 02:16 AM, Rashmi Pawar wrote: > > Hi when i configured subsystem pki-ca i got he error "Error 46 > Cerendentials not generated" > Please find the attached file that shows the error... > > > I don't believe we support IE for the administration interface. > If possible, please try with firefox. > > > > On Wed, Sep 2, 2009 at 8:57 AM, Rashmi Pawar wrote: > >> ok.. >> thanks a lot... >> >> On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan wrote: >> >>> On 09/01/2009 07:48 PM, Rashmi Pawar wrote: >>> >>> >>> >>> Thank you Chandrasekar for your prompt and informative response. >>> >>> I asked if apache or secure apache is required for dogtag implementation >>> because at the end of the web page >>> http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it has been >>> mentioned that RA and TPS subsystems require Apache web server, >>> hence the question as to what all daemons and rpms need to be installed >>> and configured before starting installing and configuring PKI subsytsems. >>> >>> >>> ah ok. yeah apache is required. but if you do >>> yum -y install pki-tps pki-ra >>> >>> yum will pull in and install all the dependencies for you. >>> httpd - apache webserver is one of them. >>> >>> no other action is required. >>> >>> >>> >>> >>> >>> >>> On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan >> > wrote: >>> >>>> On 09/01/2009 09:43 AM, Rashmi Pawar wrote: >>>> >>>> >>>> >>>> I want to install all the 6 PKI subsystems for dogtag implementation, >>>> >>>> >>>> right. yum -y install pki-ca pki-tks pki-tps pki-ra pki-ocsp pki-kra >>>> is all you need to do. It will pull in httpd,tomcat5 etc... >>>> >>>> do i need to configure apache or secure apache. >>>> >>>> >>>> What is this for ? >>>> >>>> >>>> >>>> Thanks in advance. >>>> >>>> >>>> >>>> >>>> On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan < >>>> ckannan at redhat.com> wrote: >>>> >>>>> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >>>>> >>>>> Hi Chandrasekar, >>>>> >>>>> Thank you for your reply. >>>>> One quick question..As you said i dont need to install and run Apache >>>>> if pki-tps and pki-ra subsystems are not installed...My question is even if >>>>> i am not installing pki-ra and pki-tps subsystems can i still go with >>>>> apache? >>>>> >>>>> >>>>> can u explain what you will use apache for .. in this case ?.. >>>>> >>>>> >>>>> Regards, >>>>> Rashmi Pawar >>>>> On Sun, Aug 30, 2009 at 9:30 PM, wrote: >>>>> >>>>>> Send Pki-users mailing list submissions to >>>>>> pki-users at redhat.com >>>>>> >>>>>> To subscribe or unsubscribe via the World Wide Web, visit >>>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>>> or, via email, send a message with subject or body 'help' to >>>>>> pki-users-request at redhat.com >>>>>> >>>>>> You can reach the person managing the list at >>>>>> pki-users-owner at redhat.com >>>>>> >>>>>> When replying, please edit your Subject line so it is more specific >>>>>> than "Re: Contents of Pki-users digest..." >>>>>> >>>>>> >>>>>> Today's Topics: >>>>>> >>>>>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>>>>> 2. Re: Dogtag Installation on FC6 (Chandrasekar Kannan) >>>>>> >>>>>> >>>>>> ---------------------------------------------------------------------- >>>>>> >>>>>> Message: 1 >>>>>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>>>>> From: Rashmi Pawar >>>>>> Subject: [Pki-users] Dogtag Installation on FC6 >>>>>> To: pki-users at redhat.com >>>>>> Message-ID: >>>>>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com> >>>>>> Content-Type: text/plain; charset="iso-8859-1" >>>>>> >>>>>> Hi >>>>>> >>>>>> I am new to the Dogtag Certificate system. I have to install the >>>>>> dogtag >>>>>> certificate system on fedora core 6. I would appreciate help from >>>>>> pki-users >>>>>> who have successfully installed and are runing dogtag certificate >>>>>> system on >>>>>> linux. >>>>>> I read the explanantion on dogtag on >>>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>>>>> questions >>>>>> before starting the installation. Following are the questions: >>>>>> >>>>>> 1. Do I have to install and run Apache service on the system on which >>>>>> I am >>>>>> going to implement dogtag? >>>>>> 2. I am confused about the configuration of all the PKI subsystems >>>>>> like >>>>>> CA,RA,DRM...etc. In the >>>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page the >>>>>> configuration of all subsyems is given but I dont understand from >>>>>> where do I >>>>>> get the configuration URL for each subsystem. >>>>>> 3. I have to integrate the setup with Checkpoint, so need steps on the >>>>>> integration. >>>>>> >>>>>> I would appreciate if someone who has implemented dogtag would provide >>>>>> me >>>>>> easy steps to install dogtag on fedora core 6. >>>>>> >>>>>> Thanks & Regards, >>>>>> Rashmi >>>>>> -------------- next part -------------- >>>>>> An HTML attachment was scrubbed... >>>>>> URL: >>>>>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>>>>> >>>>>> ------------------------------ >>>>>> >>>>>> Message: 2 >>>>>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>>>>> From: Chandrasekar Kannan >>>>>> Subject: Re: [Pki-users] Dogtag Installation on FC6 >>>>>> To: Rashmi Pawar >>>>>> Cc: pki-users at redhat.com >>>>>> Message-ID: <4A9A8CEB.1080404 at redhat.com> >>>>>> Content-Type: text/plain; charset="iso-8859-1" >>>>>> >>>>>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>>>>> > Hi >>>>>> > I am new to the Dogtag Certificate system. I have to install the >>>>>> > dogtag certificate system on fedora core 6. I would appreciate help >>>>>> > from pki-users who have successfully installed and are runing dogtag >>>>>> > certificate system on linux. >>>>>> > I read the explanantion on dogtag on >>>>>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>>>>> > questions before starting the installation. Following are the >>>>>> questions: >>>>>> > 1. Do I have to install and run Apache service on the system on >>>>>> > which I am going to implement dogtag? >>>>>> >>>>>> not unless you need pki-tps or pki-ra subsystems. For pki-ca, pki-tks, >>>>>> pki-ocsp, pki-kra you just need tomcat5. >>>>>> >>>>>> > 2. I am confused about the configuration of all the PKI subsystems >>>>>> > like CA,RA,DRM...etc. In the >>>>>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page the configuration >>>>>> of >>>>>> > all subsyems is given but I dont understand from where do I get the >>>>>> > configuration URL for each subsystem. >>>>>> >>>>>> for example, once you run yum install pki-ca, the rpm post install >>>>>> scripts run /usr/bin/pkicreate utility to create the default instance. >>>>>> Upon creation of this default instance, pkicreate spits out the url >>>>>> for >>>>>> configuration. >>>>>> >>>>>> >>>>>> > 3. I have to integrate the setup with Checkpoint, so need steps on >>>>>> the >>>>>> > integration. >>>>>> no idea. >>>>>> >>>>>> > I would appreciate if someone who has implemented dogtag would >>>>>> provide >>>>>> > me easy steps to install dogtag on fedora core 6. >>>>>> > Thanks & Regards, >>>>>> > Rashmi >>>>>> > >>>>>> ------------------------------------------------------------------------ >>>>>> > >>>>>> > _______________________________________________ >>>>>> > Pki-users mailing list >>>>>> > Pki-users at redhat.com >>>>>> > https://www.redhat.com/mailman/listinfo/pki-users >>>>>> > >>>>>> >>>>>> -------------- next part -------------- >>>>>> An HTML attachment was scrubbed... >>>>>> URL: >>>>>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>>>>> >>>>>> ------------------------------ >>>>>> >>>>>> _______________________________________________ >>>>>> Pki-users mailing list >>>>>> Pki-users at redhat.com >>>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>>> >>>>>> >>>>>> End of Pki-users Digest, Vol 18, Issue 6 >>>>>> **************************************** >>>>>> >>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rashmeepawar at gmail.com Tue Sep 8 05:47:35 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Tue, 8 Sep 2009 11:17:35 +0530 Subject: [Pki-users] How to completely remove all traces of pki subsystem Message-ID: <816962df0909072247h2a016b41w8f20e7ca252a96b@mail.gmail.com> Hi, I tried using firefox for configuration but was not successfull. As i got the error 46 on web browser and could not resolve the error I uninstalled all the pki subsystems, again when i installed the pki susbsytems say pki-ca a new instance file /var/log/pki-ca-install.log was not created.. Please advice me how to completely remove all traces, instances of pki-subsystems..as i tried pkiremove and pkicreate to remove and create the instance and log file...but was unsuccessfull. Thanks. Regards. Rsahmi On Fri, Sep 4, 2009 at 6:36 PM, Chandrasekar Kannan wrote: > On 09/04/2009 02:16 AM, Rashmi Pawar wrote: > > Hi when i configured subsystem pki-ca i got he error "Error 46 > Cerendentials not generated" > Please find the attached file that shows the error... > > > I don't believe we support IE for the administration interface. > If possible, please try with firefox. > > > > On Wed, Sep 2, 2009 at 8:57 AM, Rashmi Pawar wrote: > >> ok.. >> thanks a lot... >> >> On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan wrote: >> >>> On 09/01/2009 07:48 PM, Rashmi Pawar wrote: >>> >>> >>> >>> Thank you Chandrasekar for your prompt and informative response. >>> >>> I asked if apache or secure apache is required for dogtag implementation >>> because at the end of the web page >>> http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it has been >>> mentioned that RA and TPS subsystems require Apache web server, >>> hence the question as to what all daemons and rpms need to be installed >>> and configured before starting installing and configuring PKI subsytsems. >>> >>> >>> ah ok. yeah apache is required. but if you do >>> yum -y install pki-tps pki-ra >>> >>> yum will pull in and install all the dependencies for you. >>> httpd - apache webserver is one of them. >>> >>> no other action is required. >>> >>> >>> >>> >>> >>> >>> On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan >> > wrote: >>> >>>> On 09/01/2009 09:43 AM, Rashmi Pawar wrote: >>>> >>>> >>>> >>>> I want to install all the 6 PKI subsystems for dogtag implementation, >>>> >>>> >>>> right. yum -y install pki-ca pki-tks pki-tps pki-ra pki-ocsp pki-kra >>>> is all you need to do. It will pull in httpd,tomcat5 etc... >>>> >>>> do i need to configure apache or secure apache. >>>> >>>> >>>> What is this for ? >>>> >>>> >>>> >>>> Thanks in advance. >>>> >>>> >>>> >>>> >>>> On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan < >>>> ckannan at redhat.com> wrote: >>>> >>>>> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >>>>> >>>>> Hi Chandrasekar, >>>>> >>>>> Thank you for your reply. >>>>> One quick question..As you said i dont need to install and run Apache >>>>> if pki-tps and pki-ra subsystems are not installed...My question is even if >>>>> i am not installing pki-ra and pki-tps subsystems can i still go with >>>>> apache? >>>>> >>>>> >>>>> can u explain what you will use apache for .. in this case ?.. >>>>> >>>>> >>>>> Regards, >>>>> Rashmi Pawar >>>>> On Sun, Aug 30, 2009 at 9:30 PM, wrote: >>>>> >>>>>> Send Pki-users mailing list submissions to >>>>>> pki-users at redhat.com >>>>>> >>>>>> To subscribe or unsubscribe via the World Wide Web, visit >>>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>>> or, via email, send a message with subject or body 'help' to >>>>>> pki-users-request at redhat.com >>>>>> >>>>>> You can reach the person managing the list at >>>>>> pki-users-owner at redhat.com >>>>>> >>>>>> When replying, please edit your Subject line so it is more specific >>>>>> than "Re: Contents of Pki-users digest..." >>>>>> >>>>>> >>>>>> Today's Topics: >>>>>> >>>>>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>>>>> 2. Re: Dogtag Installation on FC6 (Chandrasekar Kannan) >>>>>> >>>>>> >>>>>> ---------------------------------------------------------------------- >>>>>> >>>>>> Message: 1 >>>>>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>>>>> From: Rashmi Pawar >>>>>> Subject: [Pki-users] Dogtag Installation on FC6 >>>>>> To: pki-users at redhat.com >>>>>> Message-ID: >>>>>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com> >>>>>> Content-Type: text/plain; charset="iso-8859-1" >>>>>> >>>>>> Hi >>>>>> >>>>>> I am new to the Dogtag Certificate system. I have to install the >>>>>> dogtag >>>>>> certificate system on fedora core 6. I would appreciate help from >>>>>> pki-users >>>>>> who have successfully installed and are runing dogtag certificate >>>>>> system on >>>>>> linux. >>>>>> I read the explanantion on dogtag on >>>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>>>>> questions >>>>>> before starting the installation. Following are the questions: >>>>>> >>>>>> 1. Do I have to install and run Apache service on the system on which >>>>>> I am >>>>>> going to implement dogtag? >>>>>> 2. I am confused about the configuration of all the PKI subsystems >>>>>> like >>>>>> CA,RA,DRM...etc. In the >>>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page the >>>>>> configuration of all subsyems is given but I dont understand from >>>>>> where do I >>>>>> get the configuration URL for each subsystem. >>>>>> 3. I have to integrate the setup with Checkpoint, so need steps on the >>>>>> integration. >>>>>> >>>>>> I would appreciate if someone who has implemented dogtag would provide >>>>>> me >>>>>> easy steps to install dogtag on fedora core 6. >>>>>> >>>>>> Thanks & Regards, >>>>>> Rashmi >>>>>> -------------- next part -------------- >>>>>> An HTML attachment was scrubbed... >>>>>> URL: >>>>>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>>>>> >>>>>> ------------------------------ >>>>>> >>>>>> Message: 2 >>>>>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>>>>> From: Chandrasekar Kannan >>>>>> Subject: Re: [Pki-users] Dogtag Installation on FC6 >>>>>> To: Rashmi Pawar >>>>>> Cc: pki-users at redhat.com >>>>>> Message-ID: <4A9A8CEB.1080404 at redhat.com> >>>>>> Content-Type: text/plain; charset="iso-8859-1" >>>>>> >>>>>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>>>>> > Hi >>>>>> > I am new to the Dogtag Certificate system. I have to install the >>>>>> > dogtag certificate system on fedora core 6. I would appreciate help >>>>>> > from pki-users who have successfully installed and are runing dogtag >>>>>> > certificate system on linux. >>>>>> > I read the explanantion on dogtag on >>>>>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page yet I have some >>>>>> > questions before starting the installation. Following are the >>>>>> questions: >>>>>> > 1. Do I have to install and run Apache service on the system on >>>>>> > which I am going to implement dogtag? >>>>>> >>>>>> not unless you need pki-tps or pki-ra subsystems. For pki-ca, pki-tks, >>>>>> pki-ocsp, pki-kra you just need tomcat5. >>>>>> >>>>>> > 2. I am confused about the configuration of all the PKI subsystems >>>>>> > like CA,RA,DRM...etc. In the >>>>>> > http://pki.fedoraproject.org/wiki/PKI_Main_Page the configuration >>>>>> of >>>>>> > all subsyems is given but I dont understand from where do I get the >>>>>> > configuration URL for each subsystem. >>>>>> >>>>>> for example, once you run yum install pki-ca, the rpm post install >>>>>> scripts run /usr/bin/pkicreate utility to create the default instance. >>>>>> Upon creation of this default instance, pkicreate spits out the url >>>>>> for >>>>>> configuration. >>>>>> >>>>>> >>>>>> > 3. I have to integrate the setup with Checkpoint, so need steps on >>>>>> the >>>>>> > integration. >>>>>> no idea. >>>>>> >>>>>> > I would appreciate if someone who has implemented dogtag would >>>>>> provide >>>>>> > me easy steps to install dogtag on fedora core 6. >>>>>> > Thanks & Regards, >>>>>> > Rashmi >>>>>> > >>>>>> ------------------------------------------------------------------------ >>>>>> > >>>>>> > _______________________________________________ >>>>>> > Pki-users mailing list >>>>>> > Pki-users at redhat.com >>>>>> > https://www.redhat.com/mailman/listinfo/pki-users >>>>>> > >>>>>> >>>>>> -------------- next part -------------- >>>>>> An HTML attachment was scrubbed... >>>>>> URL: >>>>>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>>>>> >>>>>> ------------------------------ >>>>>> >>>>>> _______________________________________________ >>>>>> Pki-users mailing list >>>>>> Pki-users at redhat.com >>>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>>> >>>>>> >>>>>> End of Pki-users Digest, Vol 18, Issue 6 >>>>>> **************************************** >>>>>> >>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From kchamart at redhat.com Tue Sep 8 13:13:40 2009 From: kchamart at redhat.com (kashyap chamarthy) Date: Tue, 08 Sep 2009 18:43:40 +0530 Subject: [Pki-users] How to completely remove all traces of pki subsystem In-Reply-To: <816962df0909072247h2a016b41w8f20e7ca252a96b@mail.gmail.com> References: <816962df0909072247h2a016b41w8f20e7ca252a96b@mail.gmail.com> Message-ID: <4AA65884.8040902@redhat.com> Rashmi Pawar wrote: > Hi, > > I tried using firefox for configuration but was not successfull. > > As i got the error 46 on web browser and could not resolve the error > I uninstalled all the pki subsystems, again when i installed the pki > susbsytems say pki-ca a new instance file /var/log/pki-ca-install.log > was not created.. Please advice me how to completely remove all traces, > instances of pki-subsystems..as i tried pkiremove and pkicreate to > remove and create the instance and log file...but was unsuccessfull. Though I'm not sure of the error 46 you're encountering, - Also try to clean-up the Directory Server instance, (and later create a new one) # remove-ds.pl -i slapd-foo (-f can be passed as argument to force uninstall) - Try doing a yum remove for the pki package dependencies, - After that, try removing the below files.. /var/lib/pki* /var/log/pki* /etc/init.d/pki* - Create a new firefox user profile (just to avoid any old subsystem certs in your browser) HTH, kashyap > > Thanks. > > Regards. > Rsahmi > > > > On Fri, Sep 4, 2009 at 6:36 PM, Chandrasekar Kannan > wrote: > > On 09/04/2009 02:16 AM, Rashmi Pawar wrote: >> Hi when i configured subsystem pki-ca i got he error "Error 46 >> Cerendentials not generated" >> Please find the attached file that shows the error... > > I don't believe we support IE for the administration interface. > If possible, please try with firefox. > > >> >> On Wed, Sep 2, 2009 at 8:57 AM, Rashmi Pawar >> > wrote: >> >> ok.. >> thanks a lot... >> >> On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan >> > wrote: >> >> On 09/01/2009 07:48 PM, Rashmi Pawar wrote: >>> >>> >>> Thank you Chandrasekar for your prompt and informative >>> response. >>> >>> I asked if apache or secure apache is required for dogtag >>> implementation because at the end of the web page >>> http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments it >>> has been mentioned that RA and TPS subsystems require >>> Apache web server, >>> hence the question as to what all daemons and rpms need >>> to be installed and configured before starting installing >>> and configuring PKI subsytsems. >> >> ah ok. yeah apache is required. but if you do >> yum -y install pki-tps pki-ra >> >> yum will pull in and install all the dependencies for you. >> httpd - apache webserver is one of them. >> >> no other action is required. >> >> >> >>> >>> >>> >>> >>> On Tue, Sep 1, 2009 at 10:43 PM, Chandrasekar Kannan >>> > wrote: >>> >>> On 09/01/2009 09:43 AM, Rashmi Pawar wrote: >>>> >>>> >>>> I want to install all the 6 PKI subsystems for >>>> dogtag implementation, >>> >>> right. yum -y install pki-ca pki-tks pki-tps pki-ra >>> pki-ocsp pki-kra >>> is all you need to do. It will pull in httpd,tomcat5 >>> etc... >>> >>> >>>> do i need to configure apache or secure apache. >>> >>> What is this for ? >>> >>> >>> >>>> >>>> Thanks in advance. >>>> >>>> >>>> >>>> >>>> On Mon, Aug 31, 2009 at 5:53 PM, Chandrasekar Kannan >>>> > wrote: >>>> >>>> On 08/31/2009 01:20 AM, Rashmi Pawar wrote: >>>>> Hi Chandrasekar, >>>>> >>>>> Thank you for your reply. >>>>> One quick question..As you said i dont need to >>>>> install and run Apache if pki-tps and pki-ra >>>>> subsystems are not installed...My question is >>>>> even if i am not installing pki-ra and pki-tps >>>>> subsystems can i still go with apache? >>>> >>>> can u explain what you will use apache for .. in >>>> this case ?.. >>>> >>>>> >>>>> Regards, >>>>> Rashmi Pawar >>>>> On Sun, Aug 30, 2009 at 9:30 PM, >>>>> >>>> > wrote: >>>>> >>>>> Send Pki-users mailing list submissions to >>>>> pki-users at redhat.com >>>>> >>>>> >>>>> To subscribe or unsubscribe via the World >>>>> Wide Web, visit >>>>> >>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>> or, via email, send a message with subject >>>>> or body 'help' to >>>>> pki-users-request at redhat.com >>>>> >>>>> >>>>> You can reach the person managing the list at >>>>> pki-users-owner at redhat.com >>>>> >>>>> >>>>> When replying, please edit your Subject >>>>> line so it is more specific >>>>> than "Re: Contents of Pki-users digest..." >>>>> >>>>> >>>>> Today's Topics: >>>>> >>>>> 1. Dogtag Installation on FC6 (Rashmi Pawar) >>>>> 2. Re: Dogtag Installation on FC6 >>>>> (Chandrasekar Kannan) >>>>> >>>>> >>>>> ---------------------------------------------------------------------- >>>>> >>>>> Message: 1 >>>>> Date: Sun, 30 Aug 2009 13:42:01 +0530 >>>>> From: Rashmi Pawar >>>> > >>>>> Subject: [Pki-users] Dogtag Installation on FC6 >>>>> To: pki-users at redhat.com >>>>> >>>>> Message-ID: >>>>> >>>>> <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com >>>>> > >>>>> Content-Type: text/plain; charset="iso-8859-1" >>>>> >>>>> Hi >>>>> >>>>> I am new to the Dogtag Certificate system. >>>>> I have to install the dogtag >>>>> certificate system on fedora core 6. I >>>>> would appreciate help from pki-users >>>>> who have successfully installed and are >>>>> runing dogtag certificate system on >>>>> linux. >>>>> I read the explanantion on dogtag on >>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>>> yet I have some questions >>>>> before starting the installation. Following >>>>> are the questions: >>>>> >>>>> 1. Do I have to install and run Apache >>>>> service on the system on which I am >>>>> going to implement dogtag? >>>>> 2. I am confused about the configuration of >>>>> all the PKI subsystems like >>>>> CA,RA,DRM...etc. In the >>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>>> the >>>>> configuration of all subsyems is given but >>>>> I dont understand from where do I >>>>> get the configuration URL for each subsystem. >>>>> 3. I have to integrate the setup with >>>>> Checkpoint, so need steps on the >>>>> integration. >>>>> >>>>> I would appreciate if someone who has >>>>> implemented dogtag would provide me >>>>> easy steps to install dogtag on fedora core 6. >>>>> >>>>> Thanks & Regards, >>>>> Rashmi >>>>> -------------- next part -------------- >>>>> An HTML attachment was scrubbed... >>>>> URL: >>>>> https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html >>>>> >>>>> ------------------------------ >>>>> >>>>> Message: 2 >>>>> Date: Sun, 30 Aug 2009 07:30:03 -0700 >>>>> From: Chandrasekar Kannan >>>>> >>>> > >>>>> Subject: Re: [Pki-users] Dogtag >>>>> Installation on FC6 >>>>> To: Rashmi Pawar >>>> > >>>>> Cc: pki-users at redhat.com >>>>> >>>>> Message-ID: <4A9A8CEB.1080404 at redhat.com >>>>> > >>>>> Content-Type: text/plain; charset="iso-8859-1" >>>>> >>>>> On 08/30/2009 01:12 AM, Rashmi Pawar wrote: >>>>> > Hi >>>>> > I am new to the Dogtag Certificate >>>>> system. I have to install the >>>>> > dogtag certificate system on fedora core >>>>> 6. I would appreciate help >>>>> > from pki-users who have successfully >>>>> installed and are runing dogtag >>>>> > certificate system on linux. >>>>> > I read the explanantion on dogtag on >>>>> > >>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>>> yet I have some >>>>> > questions before starting the >>>>> installation. Following are the questions: >>>>> > 1. Do I have to install and run Apache >>>>> service on the system on >>>>> > which I am going to implement dogtag? >>>>> >>>>> not unless you need pki-tps or pki-ra >>>>> subsystems. For pki-ca, pki-tks, >>>>> pki-ocsp, pki-kra you just need tomcat5. >>>>> >>>>> > 2. I am confused about the configuration >>>>> of all the PKI subsystems >>>>> > like CA,RA,DRM...etc. In the >>>>> > >>>>> http://pki.fedoraproject.org/wiki/PKI_Main_Page >>>>> the configuration of >>>>> > all subsyems is given but I dont >>>>> understand from where do I get the >>>>> > configuration URL for each subsystem. >>>>> >>>>> for example, once you run yum install >>>>> pki-ca, the rpm post install >>>>> scripts run /usr/bin/pkicreate utility to >>>>> create the default instance. >>>>> Upon creation of this default instance, >>>>> pkicreate spits out the url for >>>>> configuration. >>>>> >>>>> >>>>> > 3. I have to integrate the setup with >>>>> Checkpoint, so need steps on the >>>>> > integration. >>>>> no idea. >>>>> >>>>> > I would appreciate if someone who has >>>>> implemented dogtag would provide >>>>> > me easy steps to install dogtag on fedora >>>>> core 6. >>>>> > Thanks & Regards, >>>>> > Rashmi >>>>> > >>>>> ------------------------------------------------------------------------ >>>>> > >>>>> > >>>>> _______________________________________________ >>>>> > Pki-users mailing list >>>>> > Pki-users at redhat.com >>>>> >>>>> > >>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>> > >>>>> >>>>> -------------- next part -------------- >>>>> An HTML attachment was scrubbed... >>>>> URL: >>>>> https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html >>>>> >>>>> ------------------------------ >>>>> >>>>> _______________________________________________ >>>>> Pki-users mailing list >>>>> Pki-users at redhat.com >>>>> >>>>> https://www.redhat.com/mailman/listinfo/pki-users >>>>> >>>>> >>>>> End of Pki-users Digest, Vol 18, Issue 6 >>>>> **************************************** >>>>> >>>>> >>>> >>>> >>> >>> >> >> >> > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users From rashmeepawar at gmail.com Thu Sep 10 19:15:58 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Fri, 11 Sep 2009 00:45:58 +0530 Subject: [Pki-users] PKI-TKS Internal Database Error Message-ID: <816962df0909101215o15187fabx62081ea45ea44ba1@mail.gmail.com> Hi, I have installed following PKI Subsystmes:pki-ca, pki-kra, pki-ocsp, pki-tks I configured pki-ca, pki-kra and pki-ocsp withoout any error. but i encountered an error message while configuring pki-tks subsystem. The error is "This database has already been used. Select the checkbox below to remove all data and resuse this database" My concern is, if i check mark the option "Remove the existing data from the base DN shown above" will it remove the databases of ca,ocsp and kra? the base DN i have used here on this wepage is dc=cactus ... the same DN has been used while configuring ca,ocsp and kra subsystem. -------------- next part -------------- An HTML attachment was scrubbed... URL: From ckannan at redhat.com Thu Sep 10 19:18:26 2009 From: ckannan at redhat.com (Chandrasekar Kannan) Date: Thu, 10 Sep 2009 12:18:26 -0700 Subject: [Pki-users] PKI-TKS Internal Database Error In-Reply-To: <816962df0909101215o15187fabx62081ea45ea44ba1@mail.gmail.com> References: <816962df0909101215o15187fabx62081ea45ea44ba1@mail.gmail.com> Message-ID: <4AA95102.7040304@redhat.com> On 09/10/2009 12:15 PM, Rashmi Pawar wrote: > Hi, > I have installed following PKI Subsystmes:pki-ca, pki-kra, pki-ocsp, pki-tks > I configured pki-ca, pki-kra and pki-ocsp withoout any error. but i > encountered an error message while configuring pki-tks subsystem. > The error is "This database has already been used. Select the checkbox > below to remove all data and resuse this database" > My concern is, if i check mark the option "Remove the existing data from > the base DN shown above" will it remove the databases of ca,ocsp and kra? > the base DN i have used here on this wepage is dc=cactus ... the same DN > has been used while configuring ca,ocsp and kra subsystem. Please provide the full baseDNs that you used for ca,ocsp,kra and the one that you are trying to use for tks. If you are pretty much picking up the default values, you should have nothing to worry. But if you have previously edited the value in the UI, then its definitely worthwhile to cross-check. > > > ------------------------------------------------------------------------ > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users From Julius.Adewumi at gdc4s.com Thu Sep 10 23:46:54 2009 From: Julius.Adewumi at gdc4s.com (Adewumi, Julius-p99373) Date: Thu, 10 Sep 2009 16:46:54 -0700 Subject: [Pki-users] PKI-TKS Internal Database Error In-Reply-To: <816962df0909101215o15187fabx62081ea45ea44ba1@mail.gmail.com> References: <816962df0909101215o15187fabx62081ea45ea44ba1@mail.gmail.com> Message-ID: <150446754087724BA4B8F287083846B20534F9EE@AZ25EXM04.gddsi.com> I've run into that several times. By just changing the name of the DB .. say kra to kra1, you will see what the problem is, especially if you have acess to the directory server you are using for the repository. If the name has been created prior in the directory server, you have to delete it from the directory server, and then it will use the name. Changing the name will make it create a new instance of the DB with the new name. From: Julius Adewumi @GDC4S.com Ph:480-441-6768 Contract Corp:MTSI ________________________________ From: pki-users-bounces at redhat.com [mailto:pki-users-bounces at redhat.com] On Behalf Of Rashmi Pawar Sent: Thursday, September 10, 2009 12:16 PM To: pki-users at redhat.com Subject: [Pki-users] PKI-TKS Internal Database Error Hi, I have installed following PKI Subsystmes:pki-ca, pki-kra, pki-ocsp, pki-tks I configured pki-ca, pki-kra and pki-ocsp withoout any error. but i encountered an error message while configuring pki-tks subsystem. The error is "This database has already been used. Select the checkbox below to remove all data and resuse this database" My concern is, if i check mark the option "Remove the existing data from the base DN shown above" will it remove the databases of ca,ocsp and kra? the base DN i have used here on this wepage is dc=cactus ... the same DN has been used while configuring ca,ocsp and kra subsystem. -------------- next part -------------- An HTML attachment was scrubbed... URL: From rashmeepawar at gmail.com Fri Sep 11 08:07:27 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Fri, 11 Sep 2009 13:37:27 +0530 Subject: [Pki-users] PKI-TKS Internal Database Error In-Reply-To: <150446754087724BA4B8F287083846B20534F9EE@AZ25EXM04.gddsi.com> References: <816962df0909101215o15187fabx62081ea45ea44ba1@mail.gmail.com> <150446754087724BA4B8F287083846B20534F9EE@AZ25EXM04.gddsi.com> Message-ID: <816962df0909110107g61fea106g349ea02901af1b4@mail.gmail.com> Hi, Thanks for the solution, it worked... After configuring all the 6 subsystems services files for all subsystem was created except for TKS...however upon starting the service pki-tks on the CA server a link to the serivices page (*Secure Admin Port = https://ca1.cactus.com:13445/tks/services*) was displayed on screen along with other On Fri, Sep 11, 2009 at 5:16 AM, Adewumi, Julius-p99373 < Julius.Adewumi at gdc4s.com> wrote: > I've run into that several times. By just changing the name of the > DB .. say kra to kra1, you will see what the problem is, > especially if you have acess to the directory server you are using for the > repository. If the name has been created prior in the directory server, > you have to delete it from the directory server, and then it will use the > name. Changing the name will make it create a new instance of the DB > with the new name. > > > *From: Julius Adewumi* > *@GDC4S.com* > *Ph:480-441-6768* > *Contract Corp:MTSI* > > > ------------------------------ > *From:* pki-users-bounces at redhat.com [mailto:pki-users-bounces at redhat.com] > *On Behalf Of *Rashmi Pawar > *Sent:* Thursday, September 10, 2009 12:16 PM > *To:* pki-users at redhat.com > *Subject:* [Pki-users] PKI-TKS Internal Database Error > > Hi, > > I have installed following PKI Subsystmes:pki-ca, pki-kra, pki-ocsp, > pki-tks > I configured pki-ca, pki-kra and pki-ocsp withoout any error. but i > encountered an error message while configuring pki-tks subsystem. > > The error is "This database has already been used. Select the checkbox > below to remove all data and resuse this database" > > My concern is, if i check mark the option "Remove the existing data from > the base DN shown above" will it remove the databases of ca,ocsp and kra? > > the base DN i have used here on this wepage is dc=cactus ... the same DN > has been used while configuring ca,ocsp and kra subsystem. > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rashmeepawar at gmail.com Fri Sep 11 08:16:16 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Fri, 11 Sep 2009 13:46:16 +0530 Subject: [Pki-users] no service page for tks Message-ID: <816962df0909110116i25a97b86vef9c7d4285f61e9@mail.gmail.com> After configuring all the 6 subsystems services files for all subsystem was created except for TKS...however upon starting the service pki-tks on the CA server a link to the serivices page (Secure Admin Port = https://ca1.cactus.com:13445/tks/services) was displayed on screen along with other links.. when i paste the above link in firefox browser a web page with heading "Certificate System TKS Services Page" opens without any links on it to view or change the settings. Is this the default behaviour of tks subsystem or if something went wrong while configuring the subsystem? if the configuration went wrong how to correct it ? does it require stopping and restarting all the subsystems? On Fri, Sep 11, 2009 at 5:16 AM, Adewumi, Julius-p99373 < Julius.Adewumi at gdc4s.com> wrote: > I've run into that several times. By just changing the name of the > DB .. say kra to kra1, you will see what the problem is, > especially if you have acess to the directory server you are using for the > repository. If the name has been created prior in the directory server, > you have to delete it from the directory server, and then it will use the > name. Changing the name will make it create a new instance of the DB > with the new name. > > > *From: Julius Adewumi* > *@GDC4S.com* > *Ph:480-441-6768* > *Contract Corp:MTSI* > > > ------------------------------ > *From:* pki-users-bounces at redhat.com [mailto:pki-users-bounces at redhat.com] > *On Behalf Of *Rashmi Pawar > *Sent:* Thursday, September 10, 2009 12:16 PM > *To:* pki-users at redhat.com > *Subject:* [Pki-users] PKI-TKS Internal Database Error > > Hi, > > I have installed following PKI Subsystmes:pki-ca, pki-kra, pki-ocsp, > pki-tks > I configured pki-ca, pki-kra and pki-ocsp withoout any error. but i > encountered an error message while configuring pki-tks subsystem. > > The error is "This database has already been used. Select the checkbox > below to remove all data and resuse this database" > > My concern is, if i check mark the option "Remove the existing data from > the base DN shown above" will it remove the databases of ca,ocsp and kra? > > the base DN i have used here on this wepage is dc=cactus ... the same DN > has been used while configuring ca,ocsp and kra subsystem. > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From kchamart at redhat.com Fri Sep 11 09:00:02 2009 From: kchamart at redhat.com (kashyap chamarthy) Date: Fri, 11 Sep 2009 14:30:02 +0530 Subject: [Pki-users] How to completely remove all traces of pki subsystem In-Reply-To: <816962df0909101007k550f8e7clcbead12014d08771@mail.gmail.com> References: <816962df0909072247h2a016b41w8f20e7ca252a96b@mail.gmail.com> <4AA65884.8040902@redhat.com> <816962df0909101007k550f8e7clcbead12014d08771@mail.gmail.com> Message-ID: <4AAA1192.1030302@redhat.com> Rashmi Pawar wrote: > Hi Kashyap, > > Thank you for the advise. > > I am using fedora 10 and installing dogtag1.2.0. I read the > documentation on redhat certificate system 8.0 on RHEL 5.3. > In the documentation fedora it has been mentioned that sqlite should be > installed while in documentation for certificate system 8.0 on RHEL5.3 > sqlite,libsqlite rpms should be removed... > SQLlite is installed at the time of installtion so I am confused if > Sqlite has to be removed from FC10 or not for RA subsytem, or if the the > prerequisites for installing the certificate system are different for > FC10 and RHEL5.3? IIRC, if you are trying to remove dependencies for RA(SQLite related), perl-DBI and perl-DBD-SQLite should be OK. /kashyap > Rashmi > On Tue, Sep 8, 2009 at 6:43 PM, kashyap chamarthy > wrote: > > Rashmi Pawar wrote: > > Hi, > > I tried using firefox for configuration but was not successfull. > As i got the error 46 on web browser and could not resolve the > error I uninstalled all the pki subsystems, again when i > installed the pki susbsytems say pki-ca a new instance file > /var/log/pki-ca-install.log was not created.. Please advice me > how to completely remove all traces, instances of > pki-subsystems..as i tried pkiremove and pkicreate to remove and > create the instance and log file...but was unsuccessfull. > > > Though I'm not sure of the error 46 you're encountering, > > > - Also try to clean-up the Directory Server instance, (and later > create a new one) > # remove-ds.pl -i slapd-foo > (-f can be passed as argument to force uninstall) > > - Try doing a yum remove for the pki package dependencies, > > - After that, try removing the below files.. > > /var/lib/pki* /var/log/pki* /etc/init.d/pki* > > - Create a new firefox user profile (just to avoid any old subsystem > certs in your browser) > > HTH, > kashyap > > Thanks. > Regards. > Rsahmi > > > > On Fri, Sep 4, 2009 at 6:36 PM, Chandrasekar Kannan > > >> wrote: > > On 09/04/2009 02:16 AM, Rashmi Pawar wrote: > > Hi when i configured subsystem pki-ca i got he error > "Error 46 > Cerendentials not generated" > Please find the attached file that shows the error... > > > I don't believe we support IE for the administration interface. > If possible, please try with firefox. > > > > On Wed, Sep 2, 2009 at 8:57 AM, Rashmi Pawar > > >> wrote: > > ok.. > thanks a lot... > > On Wed, Sep 2, 2009 at 8:40 AM, Chandrasekar Kannan > > >> wrote: > > On 09/01/2009 07:48 PM, Rashmi Pawar wrote: > > Thank you > Chandrasekar for your prompt and informative > response. > I asked if apache or secure > apache is required for dogtag > implementation because at the end of the web page > > http://pki.fedoraproject.org/wiki/PKI_Runtime_Environments > it > has been mentioned that RA and TPS subsystems > require > Apache web server, > hence the question as to what all daemons and > rpms need > to be installed and configured before > starting installing > and configuring PKI subsytsems. > > > ah ok. yeah apache is required. but if you do > yum -y install pki-tps pki-ra > > yum will pull in and install all the dependencies > for you. > httpd - apache webserver is one of them. > > no other action is required. > > > > > On Tue, Sep 1, 2009 at 10:43 PM, > Chandrasekar Kannan > >> wrote: > > On 09/01/2009 09:43 AM, Rashmi Pawar wrote: > > I > want to install all the 6 PKI subsystems for > dogtag implementation, > > > right. yum -y install pki-ca pki-tks > pki-tps pki-ra > pki-ocsp pki-kra > is all you need to do. It will pull in > httpd,tomcat5 > etc... > > > do i need to configure apache or > secure apache. > > > What is this for ? > > > > Thanks in advance. > > > On Mon, Aug 31, 2009 > at 5:53 PM, Chandrasekar Kannan > > >> wrote: > > On 08/31/2009 01:20 AM, Rashmi > Pawar wrote: > > Hi Chandrasekar, > Thank you > for your reply. > One quick question..As you > said i dont need to > install and run Apache if > pki-tps and pki-ra > subsystems are not > installed...My question is > even if i am not installing > pki-ra and pki-tps > subsystems can i still go > with apache? > > > can u explain what you will use > apache for .. in > this case ?.. > > Regards, > Rashmi Pawar > On Sun, Aug 30, 2009 at 9:30 PM, > > > >> wrote: > > Send Pki-users mailing > list submissions to > > pki-users at redhat.com > > > > > > To subscribe or > unsubscribe via the World > Wide Web, visit > > > https://www.redhat.com/mailman/listinfo/pki-users > or, via email, send a > message with subject > or body 'help' to > > pki-users-request at redhat.com > > > > > > > You can reach the person > managing the list at > > pki-users-owner at redhat.com > > > > > > > When replying, please > edit your Subject > line so it is more specific > than "Re: Contents of > Pki-users digest..." > > > Today's Topics: > > 1. Dogtag Installation > on FC6 (Rashmi Pawar) > 2. Re: Dogtag > Installation on FC6 > (Chandrasekar Kannan) > > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 30 Aug 2009 > 13:42:01 +0530 > From: Rashmi Pawar > > > >> > > Subject: [Pki-users] > Dogtag Installation on FC6 > To: pki-users at redhat.com > > > > > > Message-ID: > > > <816962df0908300112t6ca5b2at2b79ae587ba32d98 at mail.gmail.com > > > >> > > > Content-Type: text/plain; > charset="iso-8859-1" > > Hi > > I am new to the Dogtag > Certificate system. > I have to install the dogtag > certificate system on > fedora core 6. I > would appreciate help > from pki-users > who have successfully > installed and are > runing dogtag certificate > system on > linux. > I read the explanantion > on dogtag on > > http://pki.fedoraproject.org/wiki/PKI_Main_Page > yet I have some questions > before starting the > installation. Following > are the questions: > > 1. Do I have to install > and run Apache > service on the system on > which I am > going to implement dogtag? > 2. I am confused about > the configuration of > all the PKI subsystems like > CA,RA,DRM...etc. In the > > http://pki.fedoraproject.org/wiki/PKI_Main_Page > the > configuration of all > subsyems is given but > I dont understand from > where do I > get the configuration URL > for each subsystem. > 3. I have to integrate > the setup with > Checkpoint, so need steps > on the > integration. > > I would appreciate if > someone who has > implemented dogtag would > provide me > easy steps to install > dogtag on fedora core 6. > > Thanks & Regards, > Rashmi > -------------- next part > -------------- > An HTML attachment was > scrubbed... > URL: > > https://www.redhat.com/archives/pki-users/attachments/20090830/86c17a72/attachment.html > > > ------------------------------ > > Message: 2 > Date: Sun, 30 Aug 2009 > 07:30:03 -0700 > From: Chandrasekar Kannan > > > >> > > Subject: Re: [Pki-users] > Dogtag > Installation on FC6 > To: Rashmi Pawar > > > >> > > Cc: pki-users at redhat.com > > > > > > Message-ID: > <4A9A8CEB.1080404 at redhat.com > > > >> > > Content-Type: text/plain; > charset="iso-8859-1" > > On 08/30/2009 01:12 AM, > Rashmi Pawar wrote: > > Hi > > I am new to the Dogtag > Certificate > system. I have to install the > > dogtag certificate > system on fedora core > 6. I would appreciate help > > from pki-users who have > successfully > installed and are runing > dogtag > > certificate system on > linux. > > I read the explanantion > on dogtag on > > > > http://pki.fedoraproject.org/wiki/PKI_Main_Page > yet I have some > > questions before > starting the > installation. Following > are the questions: > > 1. Do I have to install > and run Apache > service on the system on > > which I am going to > implement dogtag? > > not unless you need > pki-tps or pki-ra > subsystems. For pki-ca, > pki-tks, > pki-ocsp, pki-kra you > just need tomcat5. > > > 2. I am confused about > the configuration > of all the PKI subsystems > > like CA,RA,DRM...etc. > In the > > > > http://pki.fedoraproject.org/wiki/PKI_Main_Page > the configuration of > > all subsyems is given > but I dont > understand from where do > I get the > > configuration URL for > each subsystem. > > for example, once you run > yum install > pki-ca, the rpm post install > scripts run > /usr/bin/pkicreate utility to > create the default instance. > Upon creation of this > default instance, > pkicreate spits out the > url for > configuration. > > > > 3. I have to integrate > the setup with > Checkpoint, so need steps > on the > > integration. > no idea. > > > I would appreciate if > someone who has > implemented dogtag would > provide > > me easy steps to > install dogtag on fedora > core 6. > > Thanks & Regards, > > Rashmi > > > > ------------------------------------------------------------------------ > > > > > > _______________________________________________ > > Pki-users mailing list > > Pki-users at redhat.com > > > > > > > > > https://www.redhat.com/mailman/listinfo/pki-users > > > > -------------- next part > -------------- > An HTML attachment was > scrubbed... > URL: > > https://www.redhat.com/archives/pki-users/attachments/20090830/573d26cb/attachment.html > > > ------------------------------ > > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > > > > > > > https://www.redhat.com/mailman/listinfo/pki-users > > > End of Pki-users Digest, > Vol 18, Issue 6 > > **************************************** > > > > > > > > > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users > > > From kchamart at redhat.com Fri Sep 11 09:50:49 2009 From: kchamart at redhat.com (kashyap chamarthy) Date: Fri, 11 Sep 2009 15:20:49 +0530 Subject: [Pki-users] no service page for tks In-Reply-To: <816962df0909110116i25a97b86vef9c7d4285f61e9@mail.gmail.com> References: <816962df0909110116i25a97b86vef9c7d4285f61e9@mail.gmail.com> Message-ID: <4AAA1D79.9020300@redhat.com> Rashmi Pawar wrote: > > > After configuring all the 6 subsystems services files for all subsystem > was created except for TKS...however upon starting the service pki-tks > on the CA server a link to the serivices page (Secure Admin Port > =https://ca1.cactus.com:13445/tks/services) was displayed on screen > along with other links.. > > when i paste the above link in firefox browser a web page with heading > "Certificate System TKS Services Page" opens without any links on it to > view or change the settings. From your description, what you are seeing for TKS is expected. Currently TKS does not have much interface via web. But it's used internally for several purposes for token management via TPS(and other subsytems), ESC. /kashyap > > Is this the default behaviour of tks subsystem or if something went > wrong while configuring the subsystem? > if the configuration went wrong how to correct it ? does it require > stopping and restarting all the subsystems? > > > > On Fri, Sep 11, 2009 at 5:16 AM, Adewumi, Julius-p99373 > > wrote: > > I've run into that several times. By just changing the name of the > DB .. say kra to kra1, you will see what the problem is, > especially if you have acess to the directory server you are using > for the repository. If the name has been created prior in the > directory server, > you have to delete it from the directory server, and then it will > use the name. Changing the name will make it create a new instance > of the DB > with the new name. > > > /From: Julius Adewumi/ > /@GDC4S.com/ > /Ph:480-441-6768/ > /Contract Corp:MTSI/ > > > > ------------------------------------------------------------------------ > *From:* pki-users-bounces at redhat.com > > [mailto:pki-users-bounces at redhat.com > ] *On Behalf Of *Rashmi Pawar > *Sent:* Thursday, September 10, 2009 12:16 PM > *To:* pki-users at redhat.com > *Subject:* [Pki-users] PKI-TKS Internal Database Error > > Hi, > > I have installed following PKI Subsystmes:pki-ca, pki-kra, pki-ocsp, > pki-tks > I configured pki-ca, pki-kra and pki-ocsp withoout any error. but i > encountered an error message while configuring pki-tks subsystem. > > The error is "This database has already been used. Select the > checkbox below to remove all data and resuse this database" > > My concern is, if i check mark the option "Remove the existing data > from the base DN shown above" will it remove the databases of > ca,ocsp and kra? > > the base DN i have used here on this wepage is dc=cactus ... the > same DN has been used while configuring ca,ocsp and kra subsystem. > > > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users From rashmeepawar at gmail.com Tue Sep 15 16:26:59 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Tue, 15 Sep 2009 21:56:59 +0530 Subject: [Pki-users] pkiconsole cmd not available Message-ID: <816962df0909150926q42434fl6ce15244fb8846c8@mail.gmail.com> Hi, I installed and configured all pki subsystems and started the services. Upon starting the service for pki-ca following command was thrown on screen " pkiconsole https://ca.cactus.com:9445/ca " but there is no such binary pkiconsole on the server..I need to configure profiles...please help.. Thanks in advance. -------------- next part -------------- An HTML attachment was scrubbed... URL: From ckannan at redhat.com Tue Sep 15 17:05:51 2009 From: ckannan at redhat.com (Chandrasekar Kannan) Date: Tue, 15 Sep 2009 10:05:51 -0700 Subject: [Pki-users] pkiconsole cmd not available In-Reply-To: <816962df0909150926q42434fl6ce15244fb8846c8@mail.gmail.com> References: <816962df0909150926q42434fl6ce15244fb8846c8@mail.gmail.com> Message-ID: <4AAFC96F.1010709@redhat.com> On 09/15/2009 09:26 AM, Rashmi Pawar wrote: > Hi, > I installed and configured all pki subsystems and started the services. > Upon starting the service for pki-ca following command was thrown on > screen " pkiconsole https://ca.cactus.com:9445/ca " > but there is no such binary pkiconsole on the server..I need to > configure profiles...please help.. Can you check if you have the pki-console rpm installed .. rpm -q pki-console Thanks, --Chandra > Thanks in advance. > > > ------------------------------------------------------------------------ > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users From rashmeepawar at gmail.com Tue Sep 22 05:11:25 2009 From: rashmeepawar at gmail.com (Rashmi Pawar) Date: Tue, 22 Sep 2009 10:41:25 +0530 Subject: [Pki-users] pkiconsole cmd not available In-Reply-To: <4AAFC96F.1010709@redhat.com> References: <816962df0909150926q42434fl6ce15244fb8846c8@mail.gmail.com> <4AAFC96F.1010709@redhat.com> Message-ID: <816962df0909212211i2b9e303ag4382b79c8c357b7a@mail.gmail.com> Hi thank you..I installed pki-console rpm, and got the console ..was wondering that this rpm should have been downloaded along with other dependencies...well i am now set to configure the profiles and other stuff.. On Tue, Sep 15, 2009 at 10:35 PM, Chandrasekar Kannan wrote: > On 09/15/2009 09:26 AM, Rashmi Pawar wrote: > >> Hi, >> I installed and configured all pki subsystems and started the services. >> Upon starting the service for pki-ca following command was thrown on >> screen " pkiconsole https://ca.cactus.com:9445/ca " >> but there is no such binary pkiconsole on the server..I need to >> configure profiles...please help.. >> > > Can you check if you have the pki-console rpm installed .. > > rpm -q pki-console > > Thanks, > --Chandra > > > Thanks in advance. >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Pki-users mailing list >> Pki-users at redhat.com >> https://www.redhat.com/mailman/listinfo/pki-users >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jfonfon at gmail.com Mon Sep 28 20:18:39 2009 From: jfonfon at gmail.com (jfonfon) Date: Mon, 28 Sep 2009 22:18:39 +0200 Subject: [Pki-users] help for automatic certificate generation Message-ID: <5b9ad03b0909281318q10b3d0a2l6fd9726d371f1160@mail.gmail.com> Hi, We have to generate dozen certificates for devices authentication. I've been looking for a solution with the CMCEnrollement tool. It's working but there is a manual action required to put the signed certificate request in the web interface. There is also a bulkinssuance tool but for this the CSR have to be in the CMRF format. I don't find a tool be able to convert pkcs10 to CMRF. Any tips or help to achieve this is welcome. regards, Jacques -------------- next part -------------- An HTML attachment was scrubbed... URL: