No matter what I try, I keep getting this message. Any idea as to what the 
deal is here? I have converted to DER, as I should have, with 
"x509 -in ca.crt -out ca.der -outform DER". The cerificates look like this:

x509 -noout -text -in server.crt | more
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 1 (0x1)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=US, ST=Maryland, L=Greenbelt, O=NASA/GSFC, OU=EDG CA, CN=lyta
[EMAIL PROTECTED]
        Validity
            Not Before: May 17 16:12:53 1999 GMT
            Not After : May 16 16:12:53 2000 GMT
        Subject: C=US, ST=Maryland, L=Greenbelt, O=NASA/GSFC, OU=EOS Data Gatew
ay, [EMAIL PROTECTED]
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:d9:c4:ed:60:4a:bb:0f:d6:b1:35:b9:dc:5d:1e:
                    2d:bb:b8:1a:3d:be:11:54:c4:48:f3:ad:28:ea:7a:
                    ca:e0:df:4b:8b:17:53:3d:a7:4e:88:7c:49:95:6c:
                    15:f6:d6:1a:6a:24:9a:ef:c4:4d:29:b8:47:eb:e8:
                    e8:ba:b4:47:51:e8:ab:b4:69:79:a2:15:17:cc:27:
                    52:4a:1c:4e:7b:d3:0e:d9:c2:b0:e3:19:cc:e1:31:
                    9b:9f:96:8a:a7:c3:f0:f5:ef:3f:09:7b:93:ee:aa:
                    c9:90:b3:cd:ce:82:fa:32:e4:62:98:1f:09:9b:4c:
                    44:47:34:a9:f9:b5:5c:67:cd
                Exponent: 65537 (0x10001)
    Signature Algorithm: md5WithRSAEncryption
        82:e4:e3:74:08:ce:a8:88:f0:91:d4:5f:e8:f4:dc:3e:a8:11:
        2a:da:96:20:db:31:7f:ba:70:71:bb:cf:f2:c7:af:51:da:74:
        4e:0c:77:8f:d1:9f:c3:54:85:7f:de:be:0f:b5:18:ba:41:6d:
        c2:3f:4a:4e:bf:27:6b:41:98:14:9d:e6:e8:24:e7:74:f2:3b:
        e3:6c:b0:28:24:fa:f6:ea:49:f1:cf:c5:06:08:d5:ab:3e:07:
        3a:e4:4c:f1:86:b6:70:e3:9f:19:f4:6b:be:6e:87:26:64:66:
        40:1e:96:d4:9f:9a:ec:ba:e4:61:cc:c3:26:0d:60:66:10:58:
        86:d3

x509 -noout -text -in ca.crt
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 0 (0x0)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=US, ST=Maryland, L=Greenbelt, O=NASA/GSFC, OU=EDG CA, 
[EMAIL PROTECTED]
        Validity
            Not Before: May 17 15:57:15 1999 GMT
            Not After : May 16 15:57:15 2000 GMT
        Subject: C=US, ST=Maryland, L=Greenbelt, O=NASA/GSFC, OU=EDG CA, 
[EMAIL PROTECTED]
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:b2:69:a1:3f:ca:a2:91:6f:48:c1:e1:f8:53:c7:
                    23:95:12:5a:cb:be:22:e0:95:98:0e:14:1c:78:a4:
                    dc:3e:0b:d8:48:d6:7c:f2:e9:62:3e:22:e1:05:e8:
                    ca:89:47:a9:ec:a6:d1:1d:0b:42:0a:fc:a3:9a:1a:
                    e0:a7:7c:18:9a:fc:43:e9:28:73:0c:0a:1b:aa:cd:
                    9c:54:c9:6c:c5:46:4d:07:2b:5b:84:35:00:2c:95:
                    64:ab:75:68:31:73:ea:8e:31:3e:fa:74:42:61:b0:
                    d4:b2:fa:a1:23:db:13:cb:6b:e7:27:b8:dc:5e:d2:
                    65:72:dc:f2:34:fb:6c:7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                0.......
            Netscape Cert Type: 
                ....
    Signature Algorithm: md5WithRSAEncryption
        43:d3:7f:3f:ab:ba:b5:99:75:81:51:d8:a4:01:dc:ad:d6:62:
        28:75:18:ff:37:b9:a9:a2:e4:e1:32:78:05:ba:11:e7:99:95:
        dc:30:4f:80:93:f3:5f:09:c4:b7:35:28:7e:9a:6e:66:5b:f1:
        0f:ca:11:3d:cb:45:e0:92:6a:ad:2a:33:26:5d:74:cc:e2:54:
        d2:30:cd:b5:d3:b7:5c:03:20:11:52:72:0c:11:dd:a7:68:1a:
        7f:e7:70:d2:2c:e3:3e:14:02:d3:c2:77:ad:e9:13:36:f3:7f:
        17:e1:61:84:3d:f2:c9:0e:2b:a5:8d:fd:3b:5e:d2:5f:d4:1b:
        f2:91

Argh. What's worst is that I HAD IT WORKING and rebuilt the certificates
because of a spelling error...

 --- Joe M.

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to