Hello Michael,

Thanks for replying.

I have only single installation of openssl (/usr/bin). A "find" command for 'openssl' 
from the root dir gave the following output, in addition to my SNAP-installation files 
in my home dir.
./usr/bin/openssl
./usr/include/openssl  (= dir with .h files)
./usr/local/openca/OpenCA/etc/openssl
./usr/local/openca/OpenCA/etc/openssl/openssl
But I have been installing the newer versions of openssl over older versions (0.9.6x) 
- hopefully this is not a problem. On checking the dates, I found 1 file under include 
dir with an older date stamp (Jan 29) than others. i.e /usr/include/openssl/e_os.h .  

Though I was never able to export these Admin certs to browser (PKCS12 was not 
generated), these certs were exported fine to OpenLDAP. 

Well, after spending a lot of time yesterday and today, the status currently is 
slightly different :
- Some certificates of RA Operator ; and User certs ; are being issued without any 
problems and WITHOUT EDITING as well.
- Some are giving problems Error 700 : No request file available, errno:7731071.

I am not able to figure out the reason for this inconsistency. I am using Netscape 
Communicator 4.79. I tried with 4.7 with similar results. Should the number of bits 
(512, or 1024) for modulus matter? Are there any limitations with the email length, CN 
length, characters in the fields or anything. 

Is there an OpenSSL log or any other log to indicate why the issuance of a certificate 
from the request file is failing , and why am I getting errno : 7731071 ?

One thing for sure is , if Ra Operator email id is > 29 chars, the request cannot be 
generated too. Similarly, is there any other restrictions. 

If there is anything I can do, please let me know. 

Thanks 
Pramila



-----Original Message-----
From: Michael Bell [mailto:[EMAIL PROTECTED]]
Sent: 20 May 2002 22:00
To: Pramila Rani
Cc: Openca-Users (E-mail)
Subject: Re: [Openca-Users] Is this a DN problem openca-SNAP-20020517 ;
openssl-SNAP-20020507


Pramila Rani schrieb:
> 
> Hello,
> 
> I have downloaded the latest SNAPs of openca(openca-0.9-SNAP-20020517) and openssl 
>(openssl-SNAP-20020507)

> OpenCA::OpenSSL->issueCert: openssl=\/usr\/bin\/openssl\ ca\ \-batch\ \-config\

Did you really install the OpenSSL-SNAP in /usr and not in in
/usr/local/ssl? Is /usr/bin/openssl perhaps a 0.9.6x?

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to