Have you signed the Root CA certificate first?
I guess that's the reason....

Parag

Kevin McGrath wrote:

> I just started using OpenSSL and ModSSL and when making a custom
> certificate I get this error when I run sign.sh:
>
> su-2.03# ./sign.sh server.csr
> CA signing: server.csr -> server.crt:
> Using configuration from ca.config
> Enter PEM pass phrase:
> Check that the request matches the signature
> Signature ok
> The Subjects Distinguished Name is as follows
> countryName           :PRINTABLE:'US'
> stateOrProvinceName   :PRINTABLE:'Maryland'
> localityName          :PRINTABLE:'Crofton'
> organizationName      :PRINTABLE:'BAK Internet Solutions'
> commonName            :PRINTABLE:'BAKNet, Inc.'
> emailAddress          :IA5STRING:'[EMAIL PROTECTED]'
> Certificate is to be certified until Jul 16 04:52:18 2001 GMT (365 days)
> Sign the certificate? [y/n]:y
>
> 1 out of 1 certificate requests certified, commit? [y/n]y
> Write out database with 1 new entries
> Data Base Updated
> CA verifying: server.crt <-> CA cert
> server.crt: /C=US/ST=Maryland/L=Crofton/O=BAK Internet Solutions/CN=BAKNet,
> Inc.
> [EMAIL PROTECTED]
> error 7 at 0 depth lookup:certificate signature failure
>
> What is this error and how can I fix it?
>
> -Thanks
> Kevin McGrath
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]

--
--------------------------------------------------------------------------
Parag Warudkar          Voice 080-2215010 x124
Senior Systems Engineer Fax   080-2271954
Wipro Technologies      Cellular 9845077152
(e-Commerce Division)   Business Email : [EMAIL PROTECTED]
40/1A, Lavelle Road     Personal Email : [EMAIL PROTECTED]
Bangalore India         Visit us at www.wipro.com
560001                  www.wipro.com/wiprowebsecure
--------------------------------------------------------------------------



______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to