Hi, 

I made a selfsignedCA.pem cert, then I sign my server.pem cert with.
I always have the following verification error :

verify -CAfile selfsignedCA.pem server.pem

->error 7 at 0 depth lookup:certificate signature failure

Here is how I create the certs :

the CA:
        ssleay req -new -x509 -keyout CAkey.pem -out CAcert.pem
        cat CAcert.pem CAkey.pem > selfsignedCA.pem

At this point verify selfsignedCA.pem gives me: selfsignedCA:OK

the server.pem:
        ssleay genrsa -out newkey
        ssleay req -new -key newkey -out newreq -days 1
        cat newreq newkey > new
        ssleay ca -cert selfsignedCA.pem -out serv.pem -days 1 -infiles new
        cat serv.pem newkey > server.pem (is this line really useful ?)
        ln -s server.pem `x509 -noout -hash -in server.pem`.0    

then when I try to verify I have the signatur failure error though
everything seemed OK during the execution of the commands.

        Anyone have an idea ?

                Thanks,

                        Eric DESBARBIEUX.
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to