Issue with adding new Clients

classic Classic list List threaded Threaded
20 messages Options
Reply | Threaded
Open this post in threaded view
|

Issue with adding new Clients

Henrik Hellström
Hello!

I am attempting to use WiKID for a php webapp but when I add a new Network Client with the wAuth protocol I get a java error message printed directly to the page. Here are three pictures of my settings, the error message and the WiKID log:
https://imgur.com/a/778k3

Two questions:
1. Do you know how to resolve this issue?
2. I already have a php webapp configured with the WiKID api all I'm missing is the certificates issued by the WiKID Server. Will this certificate be generated once I manage to create this client?

Thank you for your help!

Best regards,
Henrik
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
I think this is a bug on our end.  Let me dig into it.

On Mar 9, 2018 9:00 AM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Hello!

I am attempting to use WiKID for a php webapp but when I add a new Network Client with the wAuth protocol I get a java error message printed directly to the page. Here are three pictures of my settings, the error message and the WiKID log:
https://imgur.com/a/778k3

Two questions:
1. Do you know how to resolve this issue?
2. I already have a php webapp configured with the WiKID api all I'm missing is the certificates issued by the WiKID Server. Will this certificate be generated once I manage to create this client?

Thank you for your help!

Best regards,
Henrik


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
In reply to this post by Henrik Hellström
Hi!

Just wanted to check if there is some sort of workaround available while you're working on this?

Thank you!
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
Yes, sorry. We'll have an update out soon.

On Mar 12, 2018 3:35 PM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Hi!

Just wanted to check if there is some sort of workaround available while you're working on this?

Thank you!


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575462.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML

Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
In reply to this post by Henrik Hellström
Give this a whirl:

https://downloads.wikidsystems.com/wikid-server-enterprise-4.2.0.b2028-1.noarch.rpm

update doc is here:
https://www.wikidsystems.com/support/installation-how-tos/how-to-upgrade-your-wikid-strong-authentication-server/

On Mon, Mar 12, 2018 at 10:54 AM, Nick Owen <[hidden email]> wrote:

> Yes, sorry. We'll have an update out soon.
>
> On Mar 12, 2018 3:35 PM, "Henrik Hellström [via WiKID Strong Authentication
> Forums]" <[hidden email]> wrote:
>
> Hi!
>
> Just wanted to check if there is some sort of workaround available while
> you're working on this?
>
> Thank you!
>
> ________________________________
> If you reply to this email, your message will be added to the discussion
> below:
> http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575462.html
> To start a new topic under Support, email
> [hidden email]
> To unsubscribe from WiKID Strong Authentication Forums, click here.
> NAML
>
>



--
Nick Owen  --  WiKID Systems, Inc.
http://www.wikidsystems.com
On-premises Two-Factor Authentication
http://twitter.com/wikidsystems | #wikid on freenode.net
Get our low-volume newsletter - Notices, updates : http://eepurl.com/zzUeP
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
Thank you! I'm giving this a try now
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
In reply to this post by Nick Owen
Hey! I'm running a ubuntu server on mine, so I would need a .deb file.

I could try to convert the .rpm file with alien but more likely than not that's just going to create more issues. Do you have an updated .deb file as well?
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
Oops. I will build it, but I'm traveling today and the upload process is locked down pretty tight. It might be awhile.

On Mar 13, 2018 11:59 AM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Hey! I'm running a ubuntu server on mine, so I would need a .deb file.

I could try to convert the .rpm file with alien but more likely than not that's just going to create more issues. Do you have an updated .deb file as well?


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575466.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
No problem, thank you for all of the help.

Good luck on your travels!
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
Ok here it is.  Thanks for your patience.  Let me know if there are any issues.

https://downloads.wikidsystems.com/wikid-server-enterprise_4.2.0-b2029-1.deb

MD5sum is 40270694e69210ef216b4b68813dd758.

On Tue, Mar 13, 2018 at 7:23 AM, Henrik Hellström [via WiKID Strong
Authentication Forums] <[hidden email]> wrote:

> No problem, thank you for all of the help.
>
> Good luck on your travels!
>
> ________________________________
> If you reply to this email, your message will be added to the discussion
> below:
> http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575468.html
> To start a new topic under Support, email
> [hidden email]
> To unsubscribe from WiKID Strong Authentication Forums, click here.
> NAML



--
Nick Owen  --  WiKID Systems, Inc.
http://www.wikidsystems.com
On-premises Two-Factor Authentication
http://twitter.com/wikidsystems | #wikid on freenode.net
Get our low-volume newsletter - Notices, updates : http://eepurl.com/zzUeP
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
Hey again, Nick!

The update works! I managed to create a new client. However, even with the certificate generated, I still cannot get a connection between the Apache server and the WiKID server.

This is what I did so far:
1. Downloaded the WiKID API for php to my apache server.
2. Created the client for the webserver, thus generating the certificate.
3. Replaced the WiKID-CA.pem file on the webserver with a new one from /opt/WiKID/private/WiKIDCA.cer. Since the one included in the api expired 2013.
4. Took the WebServer.p12 certificate generated as I added the client, converted it into .pem and added it into the sample page included in the api.
5. Attempted to connect.

The WebServer then looks like this:


And the log on the WiKID server looks like this:


Is there some step I missed?

Thanks for your time!
/Henrik
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
Try running 'wikidctl restart'.

On Mar 15, 2018 11:39 AM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Hey again, Nick!

The update works! I managed to create a new client. However, even with the certificate generated, I still cannot get a connection between the Apache server and the WiKID server.

This is what I did so far:
1. Downloaded the WiKID API for php to my apache server.
2. Created the client for the webserver, thus generating the certificate.
3. Replaced the WiKID-CA.pem file on the webserver with a new one from /opt/WiKID/private/WiKIDCA.cer. Since the one included in the api expired 2013.
4. Took the WebServer.p12 certificate generated as I added the client, converted it into .pem and added it into the sample page included in the api.
5. Attempted to connect.

The WebServer then looks like this:


And the log on the WiKID server looks like this:


Is there some step I missed?

Thanks for your time!
/Henrik


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575470.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
Still got exactly the same error message on the webserver. But got an additional entry in the log of the WiKID server: "java.lang.IllegalStateException: Unable to find match between the canonical context path [/WiKIDAdmin] and the URI presented by the user agent [_number=10&period=M]"
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
You can ignore that one.

Did you convert the .cer to a .pem?


On Mar 15, 2018 11:46 AM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Still got exactly the same error message on the webserver. But got an additional entry in the log of the WiKID server: "java.lang.IllegalStateException: Unable to find match between the canonical context path [/WiKIDAdmin] and the URI presented by the user agent [_number=10&period=M]"


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575472.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML

Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
Made the conversion now. Still getting the same error messages.

(Also updated the php file to look for "WiKIDCA.pem" rather than .cer obviously)
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
All your system times correct, I assume?

Can you test the cert files via the command line?

On Mar 15, 2018 12:54 PM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Made the conversion now. Still getting the same error messages.

(Also updated the php file to look for "WiKIDCA.pem" rather than .cer obviously)


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575474.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML

Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
Yeah, the system times are correct!

I already tested the certs via the command line and they look fine. Both certs have correct dates and times.
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Nick Owen
Administrator
Hmm. Well the php code is pretty old. There's a Java example on the server: /opt/WiKID/tomcat/webapps/WiKIDAdmin/example.jsp. There may be some change in the invocation?

On Mar 15, 2018 2:31 PM, "Henrik Hellström [via WiKID Strong Authentication Forums]" <[hidden email]> wrote:
Yeah, the system times are correct!

I already tested the certs via the command line and they look fine. Both certs have correct dates and times.


If you reply to this email, your message will be added to the discussion below:
http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Issue-with-adding-new-Clients-tp7575460p7575476.html
To start a new topic under Support, email [hidden email]
To unsubscribe from WiKID Strong Authentication Forums, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
I'll look into it!
Reply | Threaded
Open this post in threaded view
|

Re: Issue with adding new Clients

Henrik Hellström
Hi! Just wanted to let you know that I can no longer work on this project, and thus this thread can be closed. I unfortunately never managed to solve the certificate issue.

Thank you for all of your help, and I'm happy that we were able to discover a bug or two along the way to improve the product.