That did the trick. Thanks a lot! On Fri, 2004-05-14 at 12:52, Olaf Gellert wrote: > Aaron Smith wrote: > > We have been using OpenSSL to generate certificates for various > > applications here with a home grown CA (created using openssl ca). We > > recently started upgrading our servers from Redhat 7.3 to RHEL 3.0. The > > machine that used to house the CA directories used openssl version > > 0.9.6b (RedHat RPM) and the new machine uses openssl version 0.9.7b > > (again, RedHat RPM). I tar'ed up the CA directories from the old > > machine and plopped them onto the new machine. When I attempted to > > revoke a certificate (by "openssl ca -revoke certfile.pem"), I received > > the following error: > > > > ERROR:name does not match <certificate DN here> > > Maybe it's something to do with Email-Addresses in > the DN? From 0.9.6 to 0.9.7 the entry output of > openssl changed from "Email" to "emailAddress" > so it could be that you have to change this in > the "index.txt" file of OpenSSL. > > Just a guess... > Cheers, Olaf -- ----------------------------------------------------------------- Aaron Smith vox: 269.226.9550 ext.26 Network Director fax: 269.349.9076 Nexcerpt, Inc. http://www.nexcerpt.com ...Nexcerpt... Extend Your Expertise
signature.asc
Description: This is a digitally signed message part
