Re: PnP PKI / CMP Server Timeout problem

>
> Something is preventing the transaction from completing, is there a
> firewall or some sort of security software that could be blocking
> it? cryptlib tries to detect particularly problematic firewall
> software, notably McAfee stuff, but can't work around all of them.
>
> Peter.


Hello again.

I have checked it previous because of timeout problem - I have avira
antivirus with firewall. I have deactivated it, and I have tried with
alternative VMWare Windows XP without firewall. Without success, and
same error.

This is my "extracted code":

// -----Server start

err := cryptInit();
err := cryptKeysetOpen(cryptCertStore, CRYPT_UNUSED,
CRYPT_KEYSET_ODBC_STORE, PAnsiChar(caKeystoreName), CRYPT_KEYOPT_NONE);
err := cryptKeysetOpen(cryptCaKeyset, CRYPT_UNUSED, CRYPT_KEYSET_FILE, 
PAnsiChar(caKeyPairFilename), CRYPT_KEYOPT_READONLY)
err := cryptGetPrivateKey(cryptCaKeyset, privateKey, CRYPT_KEYID_NAME,
PAnsiChar(privateKeyLabel), PAnsiChar(privateKeyPassword));
err := cryptCACertManagement(cert, CRYPT_CERTACTION_CLEANUP,
FcryptCertStore.Handle, CRYPT_UNUSED, CRYPT_UNUSED);

  /* Create the CMP PnP PKI session */
err := cryptCreateSession(cryptSession, CRYPT_UNUSED,
CRYPT_SESSION_CMP_SERVER);
err := cryptSetAttribute(cryptSession,
CRYPT_SESSINFO_SERVER_PORT, 2048);
err := cryptSetAttribute(cryptSession, CRYPT_SESSINFO_KEYSET,
cryptCertStore);
err := cryptSetAttribute(cryptSession, CRYPT_SESSINFO_PRIVATEKEY,
privateKey);
err := cryptSetAttribute(cryptSession,
CRYPT_OPTION_NET_CONNECTTIMEOUT,30);
err := cryptSetAttribute(cryptSession, CRYPT_SESSINFO_ACTIVE, 1 );
		
//... destroy objects

...

err := cryptEnd();		
		
		
		
// ---- CMP Client start

err := cryptInit();
err := cryptKeysetOpen(UserPrivateKeySet, CRYPT_UNUSED,
CRYPT_KEYSET_FILE, PAnsiChar(UserKeyPairFile), CRYPT_KEYOPT_CREATE);
err := cryptCreateSession(cryptSession, CRYPT_UNUSED, CRYPT_SESSION_CMP);
				
/* Add the server name/address, port, session timeout */
err := cryptSetAttributeString( cryptSession, CRYPT_SESSINFO_SERVER,
PAnsiChar(CMPServerAddress), Length(CMPServerAddress) );
err := cryptSetAttribute(cryptSession,
CRYPT_SESSINFO_SERVER_PORT, 2048);
err := cryptSetAttribute(cryptSession, CRYPT_OPTION_NET_CONNECTTIMEOUT,30);
err := cryptSetAttribute(cryptSession, CRYPT_OPTION_NET_READTIMEOUT,30);


/* Add the username and password or private signing key.*/
GetPkiUserDetails();
err := cryptSetAttributeString( cryptSession, CRYPT_SESSINFO_USERNAME,
userName, userNameLength );  //pki user name
err := cryptSetAttributeString( cryptSession, CRYPT_SESSINFO_PASSWORD,
password, passwordLength );	//pki user pass
err := cryptSetAttribute(cryptSession, CRYPT_SESSINFO_CMP_PRIVKEYSET,
UserPrivateKeySet);
/* Activate the session */
err := cryptSetAttribute( cryptSession, CRYPT_SESSINFO_ACTIVE, TRUE );

//... destroy objects



err := cryptEnd();

Regards

Tomasz Markiewicz


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.