Simon Liebold wrote:
Hi,
I installed OpenCA yesterday from some Debian-Packages i found here:
http://www.microcomaustralia.com.au/debian/pool/main/o/openca/

OpenCA is what i was looking for and found it by accident. However there are
always initial problems. I might have misconfigurated some stuff...

The creation of the cert-request of the first user (initial administrator)
does not work:
            Error 7211021
                  General Error. Cannot create request!

                  (OpenCA::REQ->new: Cannot create new request.
                  Backend fails with errorcode 0
                  ).

Apache's error log says:
---/var/log/apache-ssl/error.log---
Generating RSA private key, 1024 bit long modulus
........++++++
...........++++++
e is 65537 (0x10001)
Enter Encryption Password:
unknown option -subj
req [options] <infile >outfile
where options  are
 -inform arg    input format - DER or PEM
 -outform arg   output format - DER or PEM
 -in arg        input file
---/var/log/apache-ssl/error.log---
How can set OpenCA not to pass this option "-subj" to openssl?

OpenCA requires this option from OpenSSL. The problem is that this option is only available on OpenSSL 0.9.7. If you install a debian then you must install OpenSSL 0.9.7 from Debian testing or unstable (sid). The problem is that I don't know what is the path configuration in your debianpackages. Check the OpenCA configurationfiles for the variable OpenSSL (/etc/openca/servers/*.conf). It must be the binary of an OpenSSL 0.9.7. "openssl version" shows you the actual version.


Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org




------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to