Re: Pkinit and proxy certificates

[Athanasios Moralis <amoral@netmode.ntua.gr>]

I installed the newer version but the kdc does not start:

# 2006-11-24T15:39:10 pkinit enabled but no identity

What does this mean? The previous version works fine with
the same configuration (without proxy certificates of course)

Sakis

Love Hörnquist Åstrand wrote:
> 27 okt 2006 kl. 11.56 skrev Athanasios Moralis:
>
>> Has anyone used globus proxy certificates for pkinit?
>
> No, but I just added test for proxy certificate and with some minor code
> changes I got it working. The snapshot generated tonight includes the 
> changes.
>
> The certificate file must include both the proxy certificate(s) and 
> the certificate,
> please check the lib/hx509/data/pkinit-proxy-chain.crt and
> the new test in tests/kdc/check-kdc.in.
>
> $ make check-kdc && ./check-kdc && echo ok!
> [...]
> Trying pk-init (proxy cert)
> [...]
> Trying pk-init (proxy cert) --pk-use-enckey
>
> Love
>
> PS Thanks for reminding me.
>