Hi Elvira,
On Fri, Jan 30, 2009 at 12:42:37PM +0300, ?????????? ??????? wrote:
> >The configuration seems to be set to copy the subject key identifier
> >into the authority key identifier extension of the issued certificate.
> >Is it possible that your CA certificate does not contain a subject
> >key identifier extension, so that OpenSSL fails when trying to copy
> >it from the CA certificate?
>
> Maybe my steps are not correct? Could you check it please:
The steps look good to me.
> "> 461:error:2207707B:X509 V3 routines:V2I_AUTHORITY_KEYID:unable to get
> > issuer keyid:v3_akey.c:166:
> > 461:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
> > extension:v3_conf.c:93:name=authorityKeyIdentifier, value=
> > keyid:always,issuer:always"
As said, the steps look just fine, but it might be a problem with your
CA certificate/configuration. Can you please send your CA certificate
to the list so that I can verify my assumption that you're missing
the subjectKeyIdentifier extension on your CA certificate?
> I tried to transact all my steps throw web interface and have differents
> problems in "signing request" and "generate key" because of some links
> deficiency. For example, when i try to generate key, i have link
> "generate_key.html# which doesn't exists in openxpki directories...so i
> can't use this interface directly for check my steps :(
Hmmm, that is weird, I can't find a reference to generate_key.html in
the code and using the web interface works fine for me. I can't
tell what the problem is here.
Cheers,
Alex
--
Dipl.-Math. Alexander Klink | IT-Security Engineer
[email protected] | working @ urn:oid:1.3.6.1.4.1.11417
------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
