Re: [openssl-users] Making a CRL with an authority key identifier

[Juan Angel Martin (AC Camerfirma)]

Hi,

 

Uncomment line 54

crl_extensions= crl_ext

 

BR 

Juan Ángel

 

De: openssl-users [mailto:openssl-users-boun...@openssl.org] En nombre de Ivan 
Rubinson
Enviado el: jueves, 1 de junio de 2017 12:15
Para: openssl-users@openssl.org
Asunto: [openssl-users] Making a CRL with an authority key identifier

 

Hello,

My name is Ivan, and I'm trying to get OpenSSL to make a CRL with an authority 
key identifier.

(a third party API expects it from the CRL)

I make my own CA, use it to sign a certificate, and then generate the CRL. This 
is the configuration file: https://pastebin.com/yL4UBtGW (it's basically the 
example configuration file with a few changes).

Here are the commands I run:

Making the CA:

openssl req -new -x509 -days 3650 -extensions v3_ca -keyout private/cakey.pem 
-out cacert.pem -config req.cnf

Making the certificate:

openssl req -new -nodes -out pdf-req.pem -keyout private/pdf-pkey.pem -config 
req.cnf
openssl ca -config req.cnf -out pdf-cert.pem -infiles pdf-req.pem

Making the CRL:

openssl ca -config req.cnf -gencrl -out crl.pem

 

I'm using OpenSSL-Win64 0.9.8g

Even though on line 251 I ask OpenSSL to have an authority key identifier, the 
generated CRL doesn't have it. I've searched on google and tried multiple 
things (like uncommenting issuerAltName, or giving it different options) and 
the CRL still doesn't have it.

At this point I'm stumped, and I'd like to ask you nice people for help.



Thank you in advance,

Ivan Rubinson

 


 

 

Virus-free.  

 www.avast.com 

 



smime.p7s
Description: S/MIME cryptographic signature
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

RE: csr for windows server

[Juan Angel Martin (AC Camerfirma)]

Hi,

http://www.thawte.com/support/keygen/

There's a menu in the right, select your server type.


Juan Angel Martin Gomez
AC Camerfirma
Tel. +34 920252750  Fax +34 920252732
http://www.camerfirma.com
 

 -Mensaje original-
 De: [EMAIL PROTECTED] [mailto:owner-openssl-
 [EMAIL PROTECTED] En nombre de Ronan
 Enviado el: miércoles, 20 de octubre de 2004 16:58
 Para: [EMAIL PROTECTED]
 Asunto: csr for windows server
 
 how do i generate a CSR for a windows 2000 advanced server?
 
 it its to be signed by my own CA cert
 
 the cert will be used for internal comms
 
 I dont know how to genereate it on the windows box.
 I need to generate the key first  and then the cert, is that right???
 
 thanks
 
 ronan
 --
 Regards
 
 Ronan McGlue
 ==
 Analyst/Programmer
 Information Services
 Queens University Belfast
 BT7 1NN
 
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]