search

vrk-kpa / xroad-joint-development

Unmaintained repository. Development moved to: https://github.com/nordic-institute/X-Road-development
19 stars 8 forks source link

Generate certificates request #230

Closed hainguyen291 closed 6 years ago

hainguyen291 commented 6 years ago

Hello,

I got this error when try to generate certificate request from Security Server.

screenshot from 2018-05-15 15 29 11

Regards, Hai

petkivim commented 6 years ago

@hainguyen291 When you added an approved certification service on central server, what fully qualified class name did you enter when you completed the step below?

Enter the fully qualified class name that implements the ee.ria.xroad.common.certificateprofile.CertificateProfileInfo interface to the field Certificate Profile Info (for example: ee.ria.xroad.common.certificateprofile.impl.SkKlass3CertificateProfileInfoProvider).

hainguyen291 commented 6 years ago

@petkivim class name that I entered is: ee.ria.xroad.common.certificateprofile.impl.FiVRKCertificateProfileInfoProvider

petkivim commented 6 years ago

@hainguyen291

By the way, which certificate request you want to generate? According to your screenshot you're trying to generate CSR for the internal TLS certificate that is different from authentication and sign certificates. Generating TLS certificate request for the internal certificate is not part of the configuration process, because the certificate is generated automatically during the installation. That feature is there in case you want to replace the self signed certificate created during installation with a certificate provided by a trusted CA.

For generating CSRs for authentication and sign certificates you should go to Management -> Keys and Certificates page.

hainguyen291 commented 6 years ago

@petkivim

Thanks for your detail answer. I got it.