Hi, adding multiple CRL distribution points I stumbled upon a problem that could be solved by finding a seven years old bug report:
http://www.mail-archive.com/openssl-dev@openssl.org/msg21907.html The Bug is still there: http://www.openssl.org/docs/apps/x509v3_config.html at the bottom of the page. Instead of: subjectAltName = @subject_alt_section [subject_alt_section] subjectAltName = URI:ldap://somehost.com/CN=foo,CN=bar it should be: subjectAltName = @subject_alt_section [subject_alt_section] URI = ldap://somehost.com/CN=foo,CN=bar Thanks! KR, Oliver
smime.p7s
Description: S/MIME cryptographic signature
