Hello,
I trying to generate a CSR using openssl and submitting it to a MS CA. I'm using 0.9.7e
What I get is a ASN1 bad tag value met ASN:267 I'm creating this CSR using the code in demos\X509.
I can create a CSR using the command line and that works OK but not using mkreq.c
Both file parse correctly using openssl -req -text. When I try asn1parse the only difference I see is this:
257:d=4 hl=2 l= 72 cons: SET
259:d=5 hl=2 l= 70 cons: SEQUENCE
261:d=6 hl=2 l= 14 cons: SEQUENCE
263:d=7 hl=2 l= 3 prim: OBJECT :X509v3 Key Usage
268:d=7 hl=2 l= 1 prim: BOOLEAN :255
271:d=7 hl=2 l= 4 prim: OCTET STRING
277:d=6 hl=2 l= 33 cons: SEQUENCE
X509v3 Key Usage Where is this coming from? Here's two request one bad one good Any help would be great
Bad:
-----BEGIN CERTIFICATE REQUEST-----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==
-----END CERTIFICATE REQUEST-----
Good
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Mark S
This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity to
which it is addressed. If the reader of this e-mail is not the intended
recipient or his or her authorized agent, the reader is hereby notified
that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.
