Hello Zampognaro,

I'm using openssl-0.9.7!
any other suggestions?

I'm not sure whether I can help you.

Are the "Common Name" in your self-signed CA certificate and server certificate the same?
Please try to give the difference names for them!

Cheers,
Aihong Yin.



-----Original Message-----
From: Aihong Yin [mailto:[EMAIL PROTECTED]]
Sent: venerd́ 31 gennaio 2003 18.01
To: [EMAIL PROTECTED]
Subject: Re: autosigning certificate


Hello Zampognaro,

Hi all,
I tried to use my own CA in order to sign the CSR previously produced.
Following what I got:

[naunx04:aspprod] /home/aspprod/aspapp/mySSL/openSSL/bin> ./sign.sh
server.csr
CA signing: server.csr -> server.crt:
Using configuration from ca.config
Enter pass phrase for ./ca.key:
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'IT'
stateOrProvinceName   :PRINTABLE:'Napoli'
localityName          :PRINTABLE:'Pozzuoli'
organizationName      :PRINTABLE:'SchlumbergerSema'
organizationalUnitName:PRINTABLE:'EAI'
commonName            :PRINTABLE:'naunx04:8443'
emailAddress          :IA5STRING:'[EMAIL PROTECTED]'
Certificate is to be certified until Jan 29 17:29:55 2004 GMT (365 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
CA verifying: server.crt <-> CA cert
server.crt:
/C=IT/ST=Napoli/L=Pozzuoli/O=SchlumbergerSema/OU=EAI/CN=naunx04:8443/emailA

d

[EMAIL PROTECTED]
error 18 at 0 depth lookup:self signed certificate
/C=IT/ST=Napoli/L=Pozzuoli/O=SchlumbergerSema/OU=EAI/CN=naunx04:8443/emailA

d

[EMAIL PROTECTED]
error 7 at 0 depth lookup:certificate signature failure
[naunx04:aspprod] /home/aspprod/aspapp/mySSL/openSSL/bin>

I see 2 ERRORS:
error 18 at 0 depth lookup:self signed certificate
error 7 at 0 depth lookup:certificate signature failure

What they means? The certificate signing process is ok or not?

The certificate signing process is not ok!
Are you using openssl-2.9.6g? Please try it again with openssl-2.9.7.

I hope this mail is not too late for you!

Cheers,
Aihong Yin.



______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

--








______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to