search

openbankingspace / tpp-issues

34 stars 1 forks source link

Open Banking Directories - Cannot submit OB WAC and OB Seal CSRs #185

Open jekabolt opened 4 years ago

jekabolt commented 4 years ago

I am unable to submit "OB WAC" and "OB Seal" CSRs to open banking software statements with prod certs.

I use github.com/creditkudos/eidas for .csr and .key generation

go run cmd/cli/*.go -country-code GB -organization-name "Mia Pago Ltd" -organization-id PSDGB-FCA-123456 -common-name 00158000010AAAAAA

$ openssl req -in out.csr -text -noout -nameopt multiline

Certificate Request: Data: Version: 0 (0x0) Subject: countryName = GB organizationName = Mia Pago Ltd 2.5.4.97 = PSDGB-FCA-123456 commonName = 00158000010AAAAAA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9c:83:15:f6:5f:bb:b4:7d:.... Exponent: 65537 (0x10001) Attributes: Requested Extensions: X509v3 Key Usage: critical Digital Signature X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Key Identifier: BF:08:16:F2:48:D... qcStatements: 0[0......F..0......F...0D......'.0:0.0.......'....PSP_AI..Financial Conduct Authority..GB-FCA Signature Algorithm: sha256WithRSAEncryption 67:d5:d1:c5:18:10:db:eb....

I use real data btw.

I got this error from ob:

request_uuid: not provided status: failure message: We were unable to create or upload your certificate. Please try again. created_at: 2019-10-30T09:05:22.655Z

and this error in the browser console

POST https://manager.openbanking.org.uk/graphql 500 (Internal Server Error)

oliver-hohn commented 4 years ago

Have you contacted the Open Banking Service Desk about this? They should be able to give you a more detailed error message.