EJBCA - Open Source Enterprise PKI

Hmm, SignServer. 3.2.1 is the latest verson on sig...

2012-01-03T21:01:17.786+01:00

Hmm, SignServer. 3.2.1 is the latest verson on signserver.org.

The commands for cryptotokens for generating keys and requests should be the same for all crypt tokens. If you have any problems with the commands you should ask in the signserver mail list, or support forum. I know I have run the commands on a soft token.

Thank you Tomas, In the current documentation avai...

2012-01-03T20:35:41.799+01:00

Thank you Tomas,
In the current documentation available in signserver.org (ver.3.1.3) I see a reference to EJBCA in section 8.3.3 (Example usage for PKCS11CryptoToken). It is about the command used to request for a certificate from EJBCA.

I need a similar command in order to request for a certificate from EJBCA using SoftCryptoToken or P12CryptoToken, as I find none in the manual.

Thanks in advance

In the signserver features at signserver.org it sa...

2012-01-03T09:28:10.277+01:00

In the signserver features at signserver.org it says "Automatic signer certificate renewal when used together with EJBCA.". I guess it is described somewhere in the manual, con't find it right away though :-)

Hi all, Is there a manual or How-To on how to inte...

2012-01-03T05:57:59.752+01:00

Hi all,
Is there a manual or How-To on how to integrate EJBCA and SignServer?

MyEID using clientToolBox, meaning it should work ...

2011-10-25T08:44:05.201+02:00

MyEID using clientToolBox, meaning it should work as an HSM with EJBCA.
./ejbcaClientToolBox.sh pkcs11hsmkeytool test /usr/lib/opensc-pkcs11.so 1

From EJBCA 4.0.4 cmpforopenssl works in all differ...

2011-10-25T08:32:26.663+02:00

From EJBCA 4.0.4 cmpforopenssl works in all different modes of EJBCA. http://ejbca.org/adminguide.html#Interoperability

Signing with a MyEID card. pkcs11-tool --login --s...

2011-10-25T08:30:10.543+02:00

Signing with a MyEID card.
pkcs11-tool --login --sign --slot-label MyEID --id
9b741d74012280abc7ce3b1ea81d6165c1b925c9 --module /usr/lib/opensc-pkcs11.so
-i test.txt --mechanism SHA1-RSA-PKCS

The link to the other article, describing command ...

2011-10-25T07:41:44.401+02:00

The link to the other article, describing command line enrolment. http://blog.ejbca.org/2010/03/using-pure-opensc-formatted-smart-cards.html

The CA generally does not store private keys of us...

2011-10-21T11:48:34.633+02:00

The CA generally does not store private keys of users, only if key recovery is enabled. You should get well familiar with the concepts of PKI and how it works, and how the (client) softwares you are using works.
If your users for example uses a web browser the web browser stores the users private key, not the CA.

This is not a support forum though so I advice you to go to ejbca.org to find the right place to learn about PKI.

2011-10-21T11:42:39.838+02:00

This comment has been removed by the author.

You can upgrade to 4.0.4 without exporting anythin...

2011-10-21T11:25:49.676+02:00

You can upgrade to 4.0.4 without exporting anything.
If end users had access to the database, this would be the most insecure application in the history of the internet :-)

Hi, I am currently using ejbca_4_0_3. Is there an...

2011-10-21T11:21:43.557+02:00

Hi,

I am currently using ejbca_4_0_3. Is there any way to export the private keys directly from the database? Is there an interface that will allow the user access to the database so the user can export his keys?

You are awesome!! Thank you!!

2011-07-08T03:57:28.159+02:00

You are awesome!! Thank you!!

THANK YOU for posting this.....I was having all ki...

2011-06-22T14:36:05.462+02:00

THANK YOU for posting this.....I was having all kinds of weird issues and I eventually got my cert converted to P12 and then used your info to get my store created and working.

Thanks!
Brian

and sudo apt-get install libpcsclite-dev

2011-06-08T14:07:27.721+02:00

and
sudo apt-get install libpcsclite-dev

To build you may have to: sudo apt-get install aut...

2011-06-08T14:05:32.289+02:00

To build you may have to:
sudo apt-get install autoconf libtool pkg-config

Extended APDU is often an issue when using 2048 bi...

2011-05-16T08:04:58.573+02:00

Extended APDU is often an issue when using 2048 bit keys on your card. See Ludovic Rousseau's blog post on the topic, http://ludovicrousseau.blogspot.com/2011/05/extended-apdu-status-per-reader.html

Hello I am not familiar with CA servers and their ...

2011-04-03T14:56:28.878+02:00

Hello
I am not familiar with CA servers and their structure.
If I have a certificate and want to validate it, how should I do?
Is it possible to request a certificate and then validat
e it later?
Please help me...
thanks.
my email: hesamifard@gmail.com

Depends on which cards. For MyEID opensc 0.12 is n...

2011-02-16T20:35:17.125+01:00

Depends on which cards. For MyEID opensc 0.12 is needed (not in Ubuntu). For Feitian it at least works with Ubuntu 10.10, haven't tried 10.04.

Thanks for the info! Is the trunk version of opens...

2011-02-16T18:55:57.518+01:00

Thanks for the info!
Is the trunk version of opensc necessary or is it possible to get it to work with a packaged version (like the one packaged in Ubuntu 10.04)?
/JM

installing the oracle-validated-1.0.0-22.el4.x86_6...

2010-09-22T14:29:22.645+02:00

installing the oracle-validated-1.0.0-22.el4.x86_64.rpm seems to be the way to get oracle to install at all...

Helpful info about Oracle received: >You can in...

2010-09-22T09:07:30.052+02:00

Helpful info about Oracle received:
>You can install Oracle on a CentOS
>Just install the dependencies requested by Oracle and change the /etc/redhat-release file to the label that Oracle expects

That's the only one I'm aware of. I'm ...

2010-08-04T17:57:58.260+02:00

That's the only one I'm aware of. I'm not a Websphere fan though and haven't used Websphere since I wrote the blog post :-)

Good info for
2010-08-04T17:00:36.556+02:00
Good info for WebSphere portal jobs. I'm going to be a bit anal here, but you mentioned some Java options but only provided one Java option that needed to be specified. Are there other options that I will need to consider changing as well or is this the main one?

Note that this does no longer work in Firefox 3.5....

2010-02-01T16:35:04.734+01:00

Note that this does no longer work in Firefox 3.5. You must install manually or use an add-on in Firefox >= 3.5.