Re: Plug-n-Play PKI
Edward Curren <[email protected]>
| Newsgroups | gmane.comp.encryption.cryptlib |
|---|---|
| Message-ID | <[email protected]> |
Hi Peter, I have now come to a point in troubleshooting the code where the return code from the CRYPT_SESSINFO_ACTIVATE is -43. The CRYPT_ATTRIBUTE_ERRORMESSAGE returns a -2, when calling cryptGetAttribute, but does not return any text when calling cryptGetAttributeString, so I don't know what cryptlib is looking for and not finding. Is there a way I can get that information from cryptlib? Thanks On Dec 10, 2010, at 12:35 PM, Edward Curren wrote: > Hi Peter, > Through some more digging I found that the root cause looks to be that in the server code I set the CRYPT_KEYSET_DATABASE_STORE to open with CRYPT_KEYOPT_NONE rather than CRYPT_KEYOPT_READONLY. I have a question about this, though. If the CA store is readonly, how is it going to be able to perform operations that require the addition of items to the database, such as certificate creation? > > Thanks. > Ed > > > On Dec 10, 2010, at 6:19 AM, Peter Gutmann wrote: > >> Edward Curren <[email protected]> writes: >> >>> I'm trying to setup Plug-n-Play PKI using CMP. I am getting a return code of >>> CRYPT_ERROR_OPEN (-40) at the point where the code sets the connection to >>> active. >> >> What's the extended error information, CRYPT_ATTRIBUTE_ERRORMESSAGE? >> >>> Below is the code that I use to create the CA keys and database, start the CA >>> CMP server and the CMP client information. >> >> It seems OK, but I'd need to see the full error info to see what the problem >> is. >> >> Peter. >> > > > _______________________________________________ > Cryptlib mailing list > [email protected] via Mail: [email protected] > Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/ > http://news.gmane.org/gmane.comp.encryption.cryptlib > Posts from non-subscribed addresses are blocked to prevent spam, please > subscribe in order to post messages. > _______________________________________________ Cryptlib mailing list [email protected] via Mail: [email protected] Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/ http://news.gmane.org/gmane.comp.encryption.cryptlib Posts from non-subscribed addresses are blocked to prevent spam, please subscribe in order to post messages.