Mike Tsarapatsanis schrieb: > > Hi i have a small problem on 0.8.1.I can issue user > and server certificates but i cannot issue CA > certificates .When i try to sign the request on the > ca page i get the error: > Error 690 > > Configuration Error. Error while > issuing Certificate to patsatsas tsanis > > (errno: 256 - file name: > /usr/local/OpenCA/tmp/1B.req ). > > And on the apache error log : > > Using configuration from > /usr/local/OpenCA/conf/openssl/openssl.cnf > Check that the SPKAC request matches the signature > Signature ok > The Subject's Distinguished Name is as follows > emailAddress > :IA5STRING:'[EMAIL PROTECTED]' > commonName :PRINTABLE:'patsatsas tsanis' > organizationalUnitName:PRINTABLE:'NETMODE User' > organizationalUnitName:PRINTABLE:'Internet' > organizationName :PRINTABLE:'NETMODE' > countryName :PRINTABLE:'GR' > Certificate is to be certified until Sep 17 11:49:50 > 2003 GMT (365 days) > ERROR: adding extensions in section default > 19174:error:2206606A:X509 V3 > routines:V2I_BASIC_CONSTRAINTS:invalid > name:v3_bcons.c:114:section:,name:pathlen=0,value: > 19174:error:2206B080:X509 V3 > routines:X509V3_EXT_conf:error in > extension:v3_conf.c:91:name=basicConstraints, > value=CA:true,pathlen=0
There is an error in the configurationfile. Your file is: ... basicConstraints=CA:true,pathlen=0 ... I think your file should be: ... basicConstraints=CA:true,pathlen:0 ... > Still one more question.The files on > /usr/local/OpenCA/conf/openssl/extfiles are the ones > used for the certificate creation or the > /usr/local/OpenCA/conf/openssl/openssl.crt file? The files in extfiles are used for the extensions of the certificates. openssl.crt should be certificate. Do you mean openssl.cnf? Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org ------------------------------------------------------- Sponsored by: AMD - Your access to the experts on Hammer Technology! Open Source & Linux Developers, register now for the AMD Developer Symposium. Code: EX8664 http://www.developwithamd.com/developerlab _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
