Robert Hannemann schrieb:
> 
> Signature ok
> The Subject's Distinguished Name is as follows
> countryName           :PRINTABLE:'DE'
> organizationName      :PRINTABLE:'LandXY'
> organizationalUnitName:PRINTABLE:'TestOU'
> commonName            :PRINTABLE:'RA Administrator'
> ERROR: adding extensions in section default
> 32614:error:2207507C:X509 V3 routines:v2i_GENERAL_NAME:missing
> value:v3_alt.c:391:
> 32614:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in
> extension:v3_conf.c:92:name=subjectAltName,
> [EMAIL PROTECTED]
> General Error Trapped 700: Error while issuing Certificate to RA
> Administrator<BR><BR>(file name: /usr/local/OpenCA/ca/var/tmp/01.req )
> at /usr/local/OpenCA/ca/lib/functions/misc-utils.lib line 38.
> Compilation failed in require at /usr/local/apache/cgi-bin/ca/ca line
> 193.

I changed the code for the subject alternative name to have full support
for webservers. The subject alternative name must be
"email:[EMAIL PROTECTED]". The change was published in
the docs too. The advantage is that you can set the subject alternative
name to "DNS:web1.test.de,DNS:web2.test.de". So you have one server with
two names and the certificate works.

Michael 

P.S. ftp://ftp.informatik.hu-berlin.de/local/OpenCA/doc/OpenCA-guide.ps
or /local/OpenCA/suse/OpenCA-guide-*.rpm
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to