Robert Hannemann schrieb:
> 
> Lutz Jaenicke wrote:
> >
> > On Mon, Apr 22, 2002 at 03:10:48PM -0500, Ziemowit (Chris)  Pierzycki wrote:
> > > Hi,
> > >       I am using snapshot from the 4/19/02 and here is a problem I noticed.
> > > After initializing everything I go to submit a request for an
> > > Administrator certificate.  It all goes through perfect but then when I
> > > go to aprove the request (aka Issue Certificate in the Initialization
> > > menu) I get the certificate that shows these fields empty:
> > >
> > > E-Mail:                  n/a
> > > Subject alternative Name:  n/a
> > >
> > > ... and further more I noticed that the e-mail field shows up in:
> > >
> > > Distinguished Name:   serialNumber=cert's serial,C=US, O=Teleformix LLC,
> > > OU=Trustcenter, CN=Ziemowit
> > > Pierzycki,[EMAIL PROTECTED]
> >
> > The OID handling has been changed in recent versions of OpenSSL to better
> > match the RFCs. Both OpenCA and OpenSSL were changed accordingly. Make sure to
> > also use a very recent (e.g. 4/19/02 or later) OpenSSL-0.9.7 snapshot.
> 
> i get the same error and tried with OpenSSL 0.9.8-dev XX xxx XXXX
> (openssl-SNAP-20020422.tar.gz.)
> 
> apache logs:
> 
> > ERROR: adding extensions in section default
> 15333:error:2206D06D:X509 V3 routines:X509V3_parse_list:invalid null
> value:v3_utl.c:309:
> 15333:error:2206B069:X509 V3 routines:X509V3_EXT_conf:invalid extension
> string:v3_conf.c:138:name=subjectAltName,section=email:
> 15333:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in
> extension:v3_conf.c:92:name=subjectAltName, value=email:
> 
> General Error Trapped 700: Error while issuing Certificate to LRZ
> RA<BR><BR>(file name: /usr/local/OpenCA/ca/var/tmp/01.req ) at
> /usr/local/OpenCA/ca/lib/functions/misc-utils.lib line 38.
> Compilation failed in require at /usr/local/apache/cgi-bin/ca/ca line
> 193.

This problem was fixed by the patches for emailAddress.

Michael

P.S. I still wait for the OID-definitions of the attribute "pseudonym"
to include them into our openssl-files.
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to