Thank you Til, thank you Michael.
I have looked into request, here is the result:
Certificate Request:
Data:
Version: 0 (0x0)
Subject: C=LT, O=My Test CA, OU=Internet, CN=testca1.domain.com
Everything looks fine. Now maybe usefull try change openca code to
display DN value from CSR to see where is the problem. Can you, Michael
or somebody else suggest how to do that?
BTW, I get an error in another place too (regardly O=...), but I'll post
this problem as separate question.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael
Bell
Sent: 14 September 2004 16:29
To: [EMAIL PROTECTED]
Subject: Re: [Openca-Users] Problem in requesting server certificate
Dmitrij Mironov wrote:
> You are about to be asked to enter information that will be
> incorporated into your certificate request. What you are about to
> enter is what is called a Distinguished Name or a DN. There are quite
> a few fields but you can leave some blank For some fields there will
> be a default value, If you enter '.', the field will be left blank.
> -----
> Country Name (2 letter code) [LT]:LT
> State or Province Name (full name) []:
> Locality Name (eg, city) []:
> Organization Name (eg, company) []:My Test CA
> Organizational Unit Name (eg, section) []:Internet
> Common Name (eg, YOUR name) []:testca1.domain.com
> Email Address []:
>
> Please enter the following 'extra' attributes
> to be sent with your certificate request
> A challenge password []:
> An optional company name []:
>
> After submitting CSR file to OpenCA via Pub interface I get an error:
>
> Error 700
> General Error. Your request has to include O=My Test CA
Looks like you does not entered "My Test CA" as the organization
(usually a typo or an additional blank).
> openssl x509 -text -in cert.csr <- doesn't work
.csr is no valid suffix for OpenSSL
openssl x509 -text -in cert.csr -inform PEM
openssl x509 -text -in cert.csr -inform PEM -noout
If you created a DER formatted request then you must set "-inform DER".
Michael
--
_______________________________________________________________
Michael Bell Humboldt-Universitaet zu Berlin
Tel.: +49 (0)30-2093 2482 ZE Computer- und Medienservice
Fax: +49 (0)30-2093 2704 Unter den Linden 6
[EMAIL PROTECTED] D-10099 Berlin
_______________________________________________________________
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
-------------------------------------------------------
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challenge.
Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
