Re: How to renew a certificate programmicaly

From: Alon Bar-Lev (alon_at_xor-t.com)
Date: 05/26/04 

Date: Wed, 26 May 2004 23:03:31 +0200

Thank you Vishal,

Yes I think the request is correctly signed, since it is working if I remove
the application policy restriction. Please notice that the application
policy restriction is "Enrollment Agent" and that the "old certificate" does
not have this application policy.

I cannot see this template in the MMC snapin, I guess it is because it has
"X number of authotized signatures" and "Subject details supply in request".

Attached is a sample of pkcs#7 that I am generating...
(I am selecting the template name at enrollment form, I also put it in the
request, but it seems to have no effect).

I will be glad to know what I am doing wrong!

Best Regards,
Alon Bar-Lev

"Vishal Agarwal[MSFT]" <vishala@online.microsoft.com> wrote in message
news:e7rFNV0QEHA.1392@TK2MSFTNGP09.phx.gbl...
> This should have worked unless wrong certificate was used in the
> renewalCertificate. Are you sure that the request is created correctly?
>
> If you have the certificate installed in the user store, you can open
> certificate snapin and then right click on the certificate and choose
"renew
> with same key", if that succeeds then likely the request you are creating
is
> wrong.
>
> Thanks,
> Vishal Agarwal [MSFT]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights
> "Alon Bar-Lev" <alon@xor-t.com> wrote in message
> news:upoj5R0PEHA.556@TK2MSFTNGP10.phx.gbl...
> > Thank you Vishal,
> >
> > The problem was that the certificate context of the RenewalCertificate
> > property should have a private key, and that the format of the
> createReuqest
> > should be PKCS#7. (My mistake was that I thought the interface is able
to
> > generate the PKCS#10 request with the proper attributes...)
> >
> > Now, After I succeed in creating a renew request, I have a new problem
> with
> > the templates...
> > I want to define a template when the first certificate is issued by an
RAO
> > and the renewal is based on the user certificate.
> > I defined a template with this Issuance Requirements:
> > - This number of authorized signatures: 1
> > - Policy type: Application Policy
> > - Application Policy: Certificate Request Agent
> > - Require the following for reenrollment: Valid Existing Certificate.
> > My template also has Subject Name: Supply in the request.
> >
> > As I understand this template requires a "Certificate Request Agent"
> > signature for the first issuance, but the user can renew his certificate
> > anytime with the signature of his current certificate.
> >
> > The error message I get:
> > Your Request Id is 74. The disposition message is "Denied by Policy
Module
> > 0x8009480b, The Test-Authentication-Renew-Exportable Certificate
Template
> > requires 1 signatures, but only 0 were accepted.
> >
> > I've also tried to set my CA system time to a date that is within the
> > renewal period... but it still does not work.
> >
> > If I remove the the "This number of authorized signatures: 1" from the
> > template, the renew works correctly!
> >
> > Any Idea?
> > Best Regards,
> > Alon Bar-Lev
> >
> >
>
>

begin 666 pkcs7.txt
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19F)N4V4T,BM#-4)K*TDQ#0H`
`
end

Quantcast