[Pki-users] Submitting CMCRequest using HttpClient

[Erwin Himawan]

Hi Chandrasekar,

I modified my HttpClient.cfg following your config file; i.e. the  servlet
parameter: servlet=/ca/ee/ca/profileSubmitCMCFull.
The server responded with id-cct-PKIResponse as I expected.

I have to look further to investigate why the response I got from the server
indicates "Invalid Credential".

Thanks again.
Erwin

On Tue, Apr 6, 2010 at 8:50 PM, Chandrasekar Kannan <ckannan at redhat.com>wrote:

>  On 04/06/2010 06:28 PM, Erwin Himawan wrote:
>
> Hi All,
>
>  I am trying to use HttpClient to submit a CMC request.  So far, I have no
> luck. Each time, I do HttpClient, the server responses with http 404.
>
>  Anybody has ever tried this?
>
>  My questions is: could I use HttpClient to submit a CMC request and
> obtain a CMC response (a certificate?)
>
>  Here are my procedures:
> 1. Use certutil to create a CSR
> 2. Use CMCRequest to create a CMC request message
>    The CMCRequest.cfg content
>      numRequests=1
>      input=crmf1
>      output=cmcReq
>      nickname=RA Administrator
>      dbdir=/home/RAagent
>      password=
>      format=pkcs10
> 3. Use HttpClient to submit the request
>     My HttpClient.cfg contents:
>       host=ca.hh.org
>       port=9180
>       secure=false
>       input=cmcReq
>      output=cmcResp
>      servlet=/ca/profileSubmitCMCFull
>
>
> I have previously had success with a httpclient.cfg like this...
>
> host=qe-blade-13.idm.lab.bos.redhat.com
> port=23543
> secure=true
> password=redhat
> input=/root/tmp1/cmcrequest.der
> output=/root/tmp1/cmcresponse.der
> dbdir=/root/tmp1/
> clientmode=true
> nickname=CA Administrator of Instance rhpki-ca1's Idm Lab Bos Redhat
> Domainmitm ID
> servlet=/ca/ee/ca/profileSubmitCMCFull
>
>
>  Thanks,
> Erwin
>
>
> _______________________________________________
> Pki-users mailing listPki-users at redhat.comhttps://www.redhat.com/mailman/listinfo/pki-users
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20100407/e2292552/attachment.htm>