Re: [Openca-Users] server certificate

[Michael Bell]

venki wrote:

hi all

we are running Openca 0.9.1 preRC7, we want to have server certificate for our
RA machine. Their is no DNS running in our network. Is it possible to get
certificate by specifying raw ip address.

Yes.

We tried with 'basic request',
their is no problem in ra interface, but while issuing certificate in the ca
interface it gives following error.

Error 6751

General Error. Error while issuing Certificate to 192.168.2.87
(filename: /usr/local/OpenCA/var/tmp/0B.req)

OpenCA::OpenSSL returns errocode 7731071
(OpenCA::OpenSSL->issueCert: OpenSSL fails (256).)..

we used netscape browser. is their any change need to be done in CSR subjectAltName and common name for netscape. kindly help us, thanks in
advance.

What is the content of the Apache's error_log? I can create such a certificate.

Also whyn't to have RA server certificate option during intialize CA setup
itself.

The first certificate ('Create the initial administrator') during the CA setup is the certificate for the first CA Operator. The second certificate ('Create the initial RA certificate') is for the RA server.

Michael
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users