[Pki-users] Problems with Dogtag and CA cert signed by External CA

[Andrew Wnuk]

On 10/17/2012 12:52 PM, Dwayne MacKinnon wrote:
> Hi all,
>
> A helpful fellow called alee on #dogtag-pki suggested I write the list. I've
> been playing with dogtag-pki-9.0.0-10 on 64-bit Fedora 17.
>
> I'm looking to use dogtag to run a subordinate CA that does all our everyday
> PKI stuff. So when I used pki-create and went into the webform, I went the
> "create a csr" route and signed it using a root CA I'd set up using openssl.
>
> Everything seemed to work out fine, until I got to the point where I was
> restarting pki-cad (using systemctl restartpki-cad at pki-ca.service). It
> wouldn't start.
>
> With alee's help I tracked it down to a failure of SystemCertsVerification
> during the selftests.
>
> He asked me to submit my debug log to the list, so here it is.
>
> Cheers,
> DMK

Is it possible to see your root and sub CA certificates?

Thank you,
Andrew