On Wed, Jan 15, 2003 at 04:44:08PM +0100, [EMAIL PROTECTED] wrote:
> I wonder, what input did you provide to mkimapdcert 
> (i.e. if there maybe some too shorts strings, less 
> than 1 character, in the imapd file). mkimapdcert 
> worked fine for me on OpenBSD 3.2 stable.
> 
> Regards
> Alex
> 
> > From: ext John Mendenhall [mailto:[EMAIL PROTECTED]]
> > ------- session:
> > % sudo mkimapdcert
> > Generating a 1024 bit RSA private key
> > ...............................................++++++
> > ..............++++++
> > writing new private key to '/etc/ssl/private/imapd.pem'
> > -----
> > problems making Certificate Request
> > 30607:error:0D07A098:asn1 encoding 
> > routines:ASN1_mbstring_copy:string too 
>                               ^^^^^^^^^^
> > short:/usr/src/lib/libssl/crypto/../src/crypto/asn1/a_mbstr.c:
> > 147:minsize=1
>       ^^^^^^^^^

I did not provide any input to mkimapdcert.  My imapd.cnf
file is as follows:

-----  /etc/courier-imap/imapd.cnf

RANDFILE = /usr/local/sbin/imapd.rand

[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type
prompt = no

[ req_dn ]
C=US
ST=CA
L=San Diego
O=Surf Utopia
OU=
CN=mail.surfutopia.net
[EMAIL PROTECTED]

[ cert_type ]
nsCertType = server

-----  EOF

Do I need to do something else, like make sure the mkimapdcert
script knows where to look?  It just calls openssl with the
correct path.  What else am I doing wrong?

JohnM

-- 
John Mendenhall
[EMAIL PROTECTED]
surf utopia
internet services


-------------------------------------------------------
This SF.NET email is sponsored by: A Thawte Code Signing Certificate 
is essential in establishing user confidence by providing assurance of 
authenticity and code integrity. Download our Free Code Signing guide:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0028en
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to