Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PKCS12 in (software) token configuration #45

Open
mkahric opened this issue Feb 25, 2020 · 0 comments
Open

PKCS12 in (software) token configuration #45

mkahric opened this issue Feb 25, 2020 · 0 comments

Comments

@mkahric
Copy link

mkahric commented Feb 25, 2020

Is it possible to use p12 file as key/cert storage in token xml configuration?

I was try putting pki:p12 and pki:password in xml, but without success. In log I found this lines:

...
ocspd[14943]: [token.c:192] [ERROR] Possible PrivKey/Certificate Mismatch (-2)
ocspd[14943]: [core.c:59] Can not load Token Key
ocspd[14943]: [core.c:60] Can not load Token certificate
ocspd[14943]: [core.c:61] Can not load Token CA certificate
ocspd[14943]: [core.c:63] [ERROR] Token Configuration Fatal Error (56)
...

Token xml I tried with:

<?xml version="1.0" ?>
<pki:tokenConfig xmlns:pki="http://www.openca.org/openca/pki/1/0/0">
  <pki:name>ocspServerToken</pki:name>
  <pki:type>software</pki:type>
  <pki:p12>file:///usr/etc/ocspd/private/ocsp.p12</pki:p12>
  <pki:password>S0mePa55wo4d</pki:password>
  <!-- <pki:keypair></pki:keypair> -->
  <!-- <pki:cert></pki:cert> -->
  <!-- <pki:cacert></pki:cacert> -->
</pki:tokenConfig>

Do I have (and how) to provide reference to pki:keypair, pki:cert and pki:cacert?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant