Re: PKCS7 renewal request

From: Sylvain (noSpam_at_mail.net)
Date: 09/20/05

  • Next message: VJ: "software restriction programmatically!!"
    Date: Tue, 20 Sep 2005 00:45:34 +0200
    
    

    Byron wrote on 19/09/2005 21:09:
    >
    > I have a "ASP" file that breaks at the same line number everytime.
    >
    > The line number in question is:
    > "RequestStr = CertEnroll.createRequest( XECR_CMC, name, "1.3.6.1.5.5.7.3.2")"
    >
    > name is a name value pair that comes in from the request and its values are:
    > Agent: AGSUB#=8155¬&AGGEN#=003¬&CSAA;
    >
    > get's invoked it give's me the following error: Certificate: Error,
    > -2147024894 somehthing about a file not found.

    let's review the parameters:

    XECR_CMC should be defined in makeCertCnfTest.inc
    1.3.6.1.5.5.7.3.2 is a valid OID for client authentication cert

    so name should contain something invalid ... according MSDN, it must
    contains DN or OID identifier / values pairs (e.g. "CN=User,
    O=Microsoft" or "2.5.4.3=User,2.5.4.10=Microsoft")

    your syntax "Agent: AGSUB#=8155¬&AGGEN#=003¬&CSAA;" looks quite different !

    I think CertEnroll only manages prefixes is able to recognize (those
    like "CN", "O", "OU", etc) so it fails to interpret your "AGSUB#" and
    "AGGEN#" identifiers; to find an old cert, recover OIDs for these DNs
    from it and try to use these OIDs in your "name" sentence.

    Sylvain.


  • Next message: VJ: "software restriction programmatically!!"

    Relevant Pages

    • Re: Is next OID as the requested OID allowed by the protocol - to avoid timeouts
      ... All SNMP agents expect to interface to "data stores", ... I agree withe the below that simply returning the current OID as the ... set of values to service getnext request for a table. ... I think that the netsnmp client will notice and bark. ...
      (comp.protocols.snmp)
    • Re: Problem Submitting Request with Specific OID
      ... > The error that I get from Microsoft CA is> Error Constructing or Publishing Certificate Invalid Application Policies: ... > My question would be is to how to setup Microsoft StandAlone CA to accept such an OID in the request? ...
      (microsoft.public.platformsdk.security)
    • Re: About accessing Table objects.
      ... articles gave me a lot on understanding tables. ... you append .0 to the OID ... request in general for a leaf almost always is preceded with a request ...
      (comp.protocols.snmp)
    • Re: About accessing Table objects.
      ... Is it possible to get the value with a GET request or do I have to use ... It's not posible for an OID to begin with '123' - so I assume ... If that's what you're seing in a MIB browser, ... add a ".0" at the end when accessing the actual leaf, ...
      (comp.protocols.snmp)
    • Solaris 10 snmp subagent ?
      ... Prior to Solaris 10, an snmpget bulk request, a V2 request, would fail ... get_next request and passed to my subagent. ... returned a response in subtree 2 by my_agent. ... the response is returned to the remote requestor using the oid ...
      (comp.unix.solaris)