none
ASN1 unexpected end of data 0x80093102 (ASN: 258) RRS feed

  • Question

  • Heia,

    Receiving the following error when I Submit new request on my (offline)RootCA (from my SubCA):

    Any ideas, it is a fresh install on W2019.

    mvh,

    Robin


    yours sincerly, Robin E. Turpijn Microsoft System Center Specialist @ Atea, Norge.

    Wednesday, November 20, 2019 1:20 PM

Answers

  • Hi,

    I resolved the issue. The issue was the capolicy.inf. Essential tags were missing/parameters/values were missing. Values like CRL distro, CRT location.

    After the capolicy.inf was valid and I reinstalled the environment it was ok and the subca certificate could be requested properly. 

    The whole environment is perfectly up and running now :)

    BTW pkiview.msc was a big help here, just to get a refreshment of what to challenge.


    yours sincerly, Robin E. Turpijn


    • Marked as answer by Rturpijn Thursday, December 5, 2019 3:05 PM
    • Edited by Rturpijn Thursday, December 5, 2019 3:06 PM
    Thursday, December 5, 2019 3:05 PM

All replies

  • check, what certutil says about request file:

    certutil -dump path\reqfile.req
    if it is parsed correctly, check the encoding of a file. Is it ANSI or Unicode? If it is Unicode, try to set ANSI.


    Vadims Podāns, aka Crypt32
    My weblog: www.sysadmins.lv
    PowerShell PKI Module: PSPKI
    Check out new: SSL Certificate Verifier
    Check out new: ASN.1 Editor tool.

    Wednesday, November 20, 2019 1:45 PM
  • Hello,
    Thank you for posting in our TechNet forum.

    We can check if our CA environment is healthy, type PKIview.msc on start Search and click Enter.

    If there is any error about root CA or sub CA, we can try to fix the CA environment.


    If it is healthy, we can restart the CA service and reboot the CA server to see if it helps.

    Here is a similar case we can read.

    CSR submitted for certification returns error ASN1 unexpected end of data. 0x80093102 (ASN:258)







    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, November 21, 2019 3:02 AM
    Moderator
  • Hi,
    If this question has any update or is this issue solved? Also, for the question, is there any other assistance we could provide?


    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, November 25, 2019 7:08 AM
    Moderator

  • Hi,
    I am just writing to see if this question has any update. If anything is unclear, please feel free to let us know.
    Thanks for your time and have a nice day!



    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, November 27, 2019 7:16 AM
    Moderator
  • The issue is not resolved yet. I have reinstalled the CA (root) complety, still no progress. Will check out pkiview.msc as well

    yours sincerly, Robin E. Turpijn

    Wednesday, November 27, 2019 11:54 AM
  • Hi,
    Thank you for your update.

    If anything is unclear during we check pkiview.msc, please feel free to let us know.



    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Thursday, November 28, 2019 7:58 AM
    Moderator
  • Hi,
    Would you please tell me how things are going on your side. If you have any questions or concerns, please don't hesitate to let us know. 

    Again thanks for your time and have a nice day!



    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, December 3, 2019 6:18 AM
    Moderator
  • Hi,

    I resolved the issue. The issue was the capolicy.inf. Essential tags were missing/parameters/values were missing. Values like CRL distro, CRT location.

    After the capolicy.inf was valid and I reinstalled the environment it was ok and the subca certificate could be requested properly. 

    The whole environment is perfectly up and running now :)

    BTW pkiview.msc was a big help here, just to get a refreshment of what to challenge.


    yours sincerly, Robin E. Turpijn


    • Marked as answer by Rturpijn Thursday, December 5, 2019 3:05 PM
    • Edited by Rturpijn Thursday, December 5, 2019 3:06 PM
    Thursday, December 5, 2019 3:05 PM
  • Hi,
    Thank you for your update and sharing. I’m very glad that the problem has been solved. 



    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, December 6, 2019 5:32 AM
    Moderator