> The issue is one is encoded as a UTF8 string and the other is
> encoded as a printable string. This makes the binary derSubject and
> derIssuer fields different. NSS does not like derSubject and derIssuer
> fields that are different

Wow, that was the problem! Now it works! 
To fix must go to EJBCA Administration and activate "PrintableString encoding 
in DN" option in a new CA.

Thank you very much, your help has been fundamental :-)

Andrea Bontempi

Freeipa-users mailing list

Reply via email to