Stefan Söffing <[EMAIL PROTECTED]> writes:

> Thanks for your help, here is the output:

Thank you, I believe this is a problem with your CA certificate, it
contains a basic constraint as follows:

                        Certificate Authority (CA): FALSE

You need to set the CA constraint to TRUE for CA certificates.

Complete output of CA certificates printed below.

/Simon

X.509 Certificate Information:
        Version: 3
        Serial Number (hex): 00
        Issuer: C=DE,ST=RLP,O=Technische Universitaet,OU=Fachbereich 
Physik,CN=CA
        Validity:
                Not Before: Thu Sep 11 10:47:44 UTC 2008
                Not After: Sun Sep 09 10:47:44 UTC 2018
        Subject: C=DE,ST=RLP,O=Technische Universitaet,OU=Fachbereich 
Physik,CN=CA
        Subject Public Key Algorithm: RSA
                Modulus (bits 1024):
                        bb:e9:16:ea:b0:1e:49:f9:5b:d4:d4:a6:c1:0a:b9:08
                        2f:79:60:63:c0:71:80:5b:d8:17:71:e2:1e:0c:6d:09
                        da:aa:06:64:69:01:a0:c1:71:50:2e:11:bd:62:86:13
                        fa:f3:5f:35:b1:84:35:50:f3:18:fb:3c:01:c1:75:4d
                        49:5b:e3:78:16:da:d4:98:c6:99:a8:30:3e:72:57:38
                        26:b2:ec:2c:39:a2:b6:3c:28:1e:d4:df:79:de:10:e1
                        ab:97:3d:44:29:01:95:68:fb:2b:f7:dd:f0:18:3f:fb
                        02:69:ed:b9:5b:b1:ad:15:69:ce:80:cf:e6:cd:0f:23
                Exponent:
                        01:00:01
        Extensions:
                Basic Constraints (not critical):
                        Certificate Authority (CA): FALSE
                Unknown extension 2.16.840.1.113730.1.13 (not critical):
                        ASCII: ..OpenSSL Generated Certificate
                        Hexdump: 
161d4f70656e53534c2047656e657261746564204365727469666963617465
                Subject Key Identifier (not critical):
                        fab0b04945332b9dd7f56e68b591b8a24c98febb
                Authority Key Identifier (not critical):
                        fab0b04945332b9dd7f56e68b591b8a24c98febb
        Signature Algorithm: RSA-SHA
        Signature:
                51:3f:8b:9a:8b:22:0c:71:ae:2c:06:66:63:8d:28:6d
                a9:b4:79:ec:49:ce:7f:e0:fb:e9:83:cb:71:4c:87:75
                a6:30:12:92:b1:fc:05:b0:5b:10:e2:4e:cd:96:fd:52
                09:f4:d8:7a:1d:a1:a7:0f:c3:43:39:22:61:95:24:71
                02:38:98:14:78:84:6e:59:bf:9e:80:7d:84:0b:19:e2
                ed:37:85:4e:38:23:31:82:e7:ed:bf:3b:f4:93:38:90
                6b:64:16:f9:5c:d5:26:a5:75:82:94:42:45:3d:f4:25
                a6:bd:b3:8b:ba:8a:93:bd:0d:3e:4d:d3:71:78:09:c2
Other Information:
        MD5 fingerprint:
                6e7706021527b6b7a867b4bf60566483
        SHA-1 fingerprint:
                5c3a6e72781972580071abeefe730d1b85f6d167
        Public Key Id:
                2ec4b962b85e75d5b06af88d58fe5af3ac1de4ec

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to