by removing only the "subjectKeyIdentifier" from the Extensions of the crl (configuration of the child CA),
it seems to work perfectly for me.


BOTTAN Romain a �crit :

Just fixed this bug,
removed all "CRL extensions", wait 30 seconds, generate crl : OK
I'm going to investigate more tomorrow ;)

BOTTAN Romain a �crit :

Just for info,
I have the same problem,
is there another way to generate a revocation list ?
because a pki without revocation... hummm.... so sad...


X509 v3 routines #114 no public key [v3_skey.cpp], line 119 ----------------- and line 119 of v3_skey.cpp:

if(!ctx || (!ctx->subject_req && !ctx->subject_cert)) {
      X509V3err(X509V3_F_S2I_ASN1_SKEY_ID,X509V3_R_NO_PUBLIC_KEY);
      goto err;
  }
... do you understand anything?



--
===========================================================
Romain BOTTAN - Alcatel CIT office : (+33)05.34.35.33.74 mailto:[EMAIL PROTECTED] Alcatel CIT, 26, avenue Jean-Fran�ois Champollion
BP1076 31035 TOULOUSE Cedex 1
===========================================================



_____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]



Reply via email to