On 2018-01-09, Andreas Thulin <andreasthu...@gmail.com> wrote: > Hi! > > Following the example on https://man.openbsd.org/ikectl, I > > # ikectl ca test create > ...and then > # ikectl ca test certificate sub.domain.com create > ...filled out "the form", but after that... > Using configuration from /etc/ssl/test/sub.domain.com-ssl.cnf > Check that the request matches the signature > Signature ok > The Subject's Distinguished Name is as follows > countryName :PRINTABLE:'SE' > organizationName :ASN.1 12:'cppm' > commonName :ASN.1 12:'sub.domain.com' > emailAddress :IA5STRING:'webmas...@domain.com' > ERROR: adding extensions in section x509v3_FQDN > 2198743120:error:22FFF06D:X509 V3 routines:func(4095):invalid null > value:/usr/src/lib/libcrypto/x509v3/v3_utl.c:355: > 2198743120:error:22FFF069:X509 V3 routines:func(4095):invalid extension > string:/usr/src/lib/libcrypto/x509v3/v3_conf.c:143:name=subjectAltName,section=DNS: > 2198743120:error:22FFF080:X509 V3 routines:func(4095):error in > extension:/usr/src/lib/libcrypto/x509v3/v3_conf.c:96:name=subjectAltName, > value=DNS: > > I'm probably doing something stupid, so if anyone can point me in the right > direction, that would be highly appreciated. > > BR > Andreas >
Which version are you running? (See "Include important information" on http://www.openbsd.org/mail.html).
