On Wed, Jul 05, 2017 at 04:55:34PM -0700, [email protected] wrote: > >Synopsis: ikectl can't revoke certs > >Category: system > >Environment: > System : OpenBSD 6.1 > Details : OpenBSD 6.1 (GENERIC.MP) #291: Sat Apr 1 13:53:41 MDT > 2017 > > [email protected]:/usr/src/sys/arch/i386/compile/GENERIC.MP > > Architecture: OpenBSD.i386 > Machine : i386 > >Description: > When attempting to use ikectl to revoke a cert the following error is > produced: > Using configuration from /etc/ssl/testca/ca-revoke-ssl.cnf > error on line 27 of config file '/etc/ssl/testca/ca-revoke-ssl.cnf' > 2332407120:error:0EFFF068:configuration file > routines:CRYPTO_internal:variable has no > value:/usr/src/lib/libcrypto/conf/conf_def.c:563:line 27 > Using configuration from /etc/ssl/testca/ca-revoke-ssl.cnf > error on line 27 of config file '/etc/ssl/testca/ca-revoke-ssl.cnf' > 2170843792:error:0EFFF068:configuration file > routines:CRYPTO_internal:variable has no > value:/usr/src/lib/libcrypto/conf/conf_def.c:563:line 27 > > >How-To-Repeat: > ikectl ca testca create > ikectl ca testca install > ikectl ca testca certificate foo.domain.com create (use defaults) > ikectl ca testca certificate foo.domain.com revoke > > >Fix: > N/A
ikectl changes made in -current in May should have fixed this.
