Guillaume Coue schrieb: > Hi all, > Following your advice, I achieved to create a request > using a CA private key stored inside a ncipher module, > but now when I try to create my certificate using my > CA private key I've got this error : > > openssl ca -engine chil -keyform engine -keyfile > rsa-privateca -policy policy_anything -in server.req > -config server.cnf -out server.pem > engine "chil" set. > Using configuration from server.cnf > Loading 'screen' into random state - done > CA certificate and CA private key do not match > 1352:error:0B080074:x509 certificate > routines:X509_check_private_key:key values > mismatch:./crypto/x509/x509_cmp.c:284:
have you tried a openssl ca -engine chil -keyform engine -keyfile \ rsa-privateca -cert cacert.pem \ -policy policy_anything -in server.req \ -config server.cnf -out server.pem Your CA cert doesn't match the CA private key... Bye Goetz -- Goetz Babin-Ebell, TC TrustCenter AG, http://www.trustcenter.de Sonninstr. 24-28, 20097 Hamburg, Germany Tel.: +49-(0)40 80 80 26 -0, Fax: +49-(0)40 80 80 26 -126
smime.p7s
Description: S/MIME Cryptographic Signature
