> best to make it , but I failed. I try to use “Signed by another CA : > Export CA Certificate Request;
Only to be shure: did you import the request on root ra and did you use role sub-ca on approuvement? And after this, you generated the certificate with your root ca and exported it?
> Import CA certificate(approved by Root > CA)” , but it dosen’t work.
What are the errors?
After importing the sub-ca certificate you have to put the root-ca certificate into the chain subdirectory on ca and ra. Then you can use "Rebuild certificate chain" on sub-ca ca and export the configuration to the sub-ca ra. After this, you should be able to generate certificates on sub-ca.
If there remain any errors, you shoud first reinstall the sub-ca from scratch (rename the old directories) using the old config files and try again - on my tests after reinitializing the ca/ra I had problems with remaing status informations in openca/var directory and in one case, my old and new public and private keys seemed somehow to be mixed...
I hope this helps!
Regards, Gottfried
kongning wrote:
Hi,
I’m a OpenCA v.9.1.3 user too. I have some trouble with generation of a Sub-CA with OpenCA. Now I can only generate certificates for users with a rootca. I want to do this with a subca generated by a rootca. I try my best to make it , but I failed. I try to use “Signed by another CA : Export CA Certificate Request; Import CA certificate(approved by Root CA)” , but it dosen’t work.
Would you help me ? Thanks a lot !!!
A OpenCA user
Ning Kong
--
_______________________________________________________ \ / [EMAIL PROTECTED] \ / Consultant Open Systems <> Mobil 0172-6710891 \/ /\ Xtelligent IT Consulting GmbH / \ Am Kalkofen 8 <> D-61206 Woellstadt / \ Tel./Fax. 0-700-98355443 <> http://www.xtelligent.de
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
