Dr S N Henson <[EMAIL PROTECTED]> writes:
> >
> > Still no success! The `openssl req -noout -text' output looks
> > something like:
> >
> > ...
> > RSA Public Key: (1024 bit)
> > Modulus (1024 bit):
> > 00:b8:66:e9:4f:ca:ba:4a:34:a8:2e:e4:65:d7:40:
> > 2d:1f:84:e6:07:c0:4c:d6:57:44:8e:89:4e:9c:bb:
> > 79:b2:5f:01:60:01:d9:6c:64:16:2d:99:c6:a2:5e:
> > ef:1d:cb:32:fc:71:5b:69:cf:4a:e0:90:90:8f:d5:
> > 8b:dd:9a:fd:b7:5f:43:fa:b4:fb:03:30:f8:f7:86:
> > 0a:9e:f7:e9:aa:d1:a8:35:d1:e3:42:d4:a8:50:0e:
> > 37:be:a0:96:52:f1:a7:c9:08:15:a3:ba:a6:ec:ef:
> > d9:09:cb:68:5b:62:c5:c8:97:14:db:18:95:90:1a:
> > 00:c1:65:fc:d9:41:e0:98:d3
> > Exponent: 65537 (0x10001)
> > Attributes:
> > a0:00
> > Signature Algorithm: md5WithRSAEncryption
> > ...
> >
> > which I believe is valid (a length of zero) but I don't know what the
> > `a0' indicates (set of?).
> >
>
> Yeah. Thats described in the manual page.
>
> Hmmm, are there any blank lines or extra stuff around the BEGIN and END
> lines? Also try a 512 bit key just in case.
Ahh.. I remedied the biggest problem. The certificate request did
verify as good but the problem was that I was supplying the request to
the Netscape Certificate Manager as a Netscape type certificate
request (KEYGEN => subjectKeyGenInfo form field). When I changed it
to be an MSIE request (pkcs10Request form field) the certificate was
returned instead of the invalid format error return.
Thanks to all for your help and being the effective sounding board...
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Alan E. Derhaag N2H2, Creators of Bess and Searchopolis
phone: 206-336-2972 900 Fourth Avenue, Suite 3600
email: [EMAIL PROTECTED],[EMAIL PROTECTED] Seattle, WA 98164
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
