[Openca-Users] Problem with initialization step 3 generating new ca

[John A. Sullivan III]

Title: /home/jsulliva/GTDSig.htm

I believe I have experienced the same problem as Slim SHTOUROU.  I am using 0.81.  I don't know which version he is using.  I got around it in a rather immature and perhaps dangerous way so someone please correct me if I am wrong.  I tracked it down to a particular line in the genCAReq command script.  In the "Get the Parameters" section there is a call to param for dn.  The problem seems to lie there.  I notice that the commented parameter list at the top of the file doesn't mention dn so perhaps this falls off the end of the array.  I didn't think that happened in perl but I know enough about perl to fill a thimble! When I commented out that one call to param, the CA initialization went smoothly.
I found a similar error when generating the RA Operator cert. The openca-newcert script makes a call to openssl and passes an -extfile argument.  It appears that this version of openssl no longer takes that argument but takes the -extensions argument.  Once I changed that, the rest went smoothly.
Someone please whack me on the side of the head if I am behaving dangerously! By the way, what module provides the getRequired function?
Take care, all - John

--
John A. Sullivan III
Group Technology Director
Nexus Management
+1 207-985-7880
[EMAIL PROTECTED]