Hi, I am having a bit of trouble creating an xp client certificate. I am a beginner in perl so I really have no idea of the following error messages. In the mkcertifcate.sh file, it trys to create a client xp certificate with openssl ca command. I am using openssl verion 0.9.6g and apparently the -extfile is not supported anymore. I ended up copying the extension to the openssl.cnf file. I try running the mkcertifcate.sh again without the -extfile command and it gave the following error. Is the extension absolutely necessary? How can I create a certificate suitable for an xp client?
<< Error from mkcertificate.sh >> Error Loading extension section xpclient_ext 4062:error:0D06B089:asn1 encoding routines:ASN1_get_object:too long:asn1_lib.c:130: 4062:error:0D081065:asn1 encoding routines:d2i_ASN1_OBJECT:bad object header:a_object.c:217: 4062:error:2206706E:X509 V3 routines:V2I_EXT_KU:invalid object identifier:v3_extku.c:143:section:,name:1.3.6.1.5.5.7.3.2,value: 4062:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:91:name=extendedKeyUsage, value=1.3.6.1.5.5.7.3.2 Error loading certificates from input 4063:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:663:Expecting: CERTIFICATE 4064:error:0D06B078:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:138: unable to load certificate 4065:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:663:Expecting: TRUSTED CERTIFICATE Thanks, -- Kenneth Cheung UNP Wireless Team University of British Columbia Office: (604) 822-0253 Cell: (604) 307-9922 ______________________________________________________________________ Post your ad for free now! http://personals.yahoo.ca === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.