Hello, We are using openssl since more than a year for an internal pki solution. Now we wanted to add the crlDistributionPoint - ext. to the certificates.
When adding a line with "crlDistributionPoint= URI:..." to the openssl.cnf into the c3_ca stanza (... for ca-certs of sub-CAs), there is an error on running the certificate creation: (input & output, linebreaks only in email:) (input line:) [localhost:~/openssl-mani/CA/perls] mikey% openssl ca -config ./openssl-iks.cnf -name CA -batch -days 3650 -keyfile ../private/CAkey.pem -extensions v3_ca -in ../requests/iksRootReq.pem -out ../newcerts/iksRootCertv3.pem -outdir ../certs | tee -a ../log/certs.log (output lines:) Using configuration from ./openssl-iks.cnf Error Loading extension section v3_ca 15843:error:2207C082:X509 V3 routines:DO_EXT_CONF:unknown extension name:v3_conf.c:121: 15843:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:91:name=crlDistributionPoint, value=http://... (end of copy) The problem arises on linux, openssl 0.9.6 and Mac OS X, openssl 0.9.6.d Best regards, Michael -- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
