We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hello,
I am trying to use sscep from Centos 7 (FIPS enabled) to enroll with windows NDES.
The CSR doesn't seem to be finalized and it is failing as following :
sudo sscep enroll -E aes128 -S sha1 -c /etc/pki/cert.crt-0 -e/etc/pki/cert.crt-1 -O /etc/pki/certsignedby CA -K /etc/pki/local2.key -k local.key -r local.csr -l $(hostname).crt -u 'http://SERVER..local/certsrv/mscep/mscep.dll/pkiclient.exe?' -d
error log: -----END PKCS7----- sscep: creating outer PKCS#7 sscep: signature added successfully sscep: adding signed attributes sscep: adding string attribute transId sscep: adding string attribute messageType sscep: adding octet attribute senderNonce sscep: PKCS#7 data written successfully sscep: error finalizing outer PKCS#7 139998786868912:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:324:group= name=fips_path 139998786868912:error:0D074041:asn1 encoding routines:ASN1_i2d_bio:malloc failure:a_i2d_fp.c:92: 139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74: 139998786868912:error:3207A06D:lib(50):B_HASH_init:cr new:b_hash.c:103: 139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74: 139998786868912:error:3207C06D:lib(50):B_HASH_Update:cr new:b_hash.c:148: 139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74: 139998786868912:error:3207906D:lib(50):B_HASH_Final:cr new:b_hash.c:186: 139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74: 139998786868912:error:3207A06D:lib(50):B_HASH_init:cr new:b_hash.c:103: 139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74: 139998786868912:error:3207C06D:lib(50):B_HASH_Update:cr new:b_hash.c:148: 139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74: 139998786868912:error:3207906D:lib(50):B_HASH_Final:cr new:b_hash.c:186: 139998786868912:error:3208906D:lib(50):B_RSA_sign:cr new:b_rsa.c:416: [root@NW11HEAD anchors]#
Please advise about his issue. Could it be becuase FIPS is enabled.
The text was updated successfully, but these errors were encountered:
any opinions ?
Sorry, something went wrong.
No branches or pull requests
Hello,
I am trying to use sscep from Centos 7 (FIPS enabled) to enroll with windows NDES.
The CSR doesn't seem to be finalized and it is failing as following :
sudo sscep enroll -E aes128 -S sha1 -c /etc/pki/cert.crt-0 -e/etc/pki/cert.crt-1 -O /etc/pki/certsignedby CA -K /etc/pki/local2.key -k local.key -r local.csr -l $(hostname).crt -u 'http://SERVER..local/certsrv/mscep/mscep.dll/pkiclient.exe?' -d
error log:
-----END PKCS7-----
sscep: creating outer PKCS#7
sscep: signature added successfully
sscep: adding signed attributes
sscep: adding string attribute transId
sscep: adding string attribute messageType
sscep: adding octet attribute senderNonce
sscep: PKCS#7 data written successfully
sscep: error finalizing outer PKCS#7
139998786868912:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:324:group= name=fips_path
139998786868912:error:0D074041:asn1 encoding routines:ASN1_i2d_bio:malloc failure:a_i2d_fp.c:92:
139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74:
139998786868912:error:3207A06D:lib(50):B_HASH_init:cr new:b_hash.c:103:
139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74:
139998786868912:error:3207C06D:lib(50):B_HASH_Update:cr new:b_hash.c:148:
139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74:
139998786868912:error:3207906D:lib(50):B_HASH_Final:cr new:b_hash.c:186:
139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74:
139998786868912:error:3207A06D:lib(50):B_HASH_init:cr new:b_hash.c:103:
139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74:
139998786868912:error:3207C06D:lib(50):B_HASH_Update:cr new:b_hash.c:148:
139998786868912:error:3207B06D:lib(50):B_HASH_NEW:cr new:b_hash.c:74:
139998786868912:error:3207906D:lib(50):B_HASH_Final:cr new:b_hash.c:186:
139998786868912:error:3208906D:lib(50):B_RSA_sign:cr new:b_rsa.c:416:
[root@NW11HEAD anchors]#
Please advise about his issue. Could it be becuase FIPS is enabled.
The text was updated successfully, but these errors were encountered: