Im using openssl-0.9.8-1.i386.rpm and openssl-devel-0.9.8-1.i386.rpm because if i configure openca-0.9-RC1.tar.gz on redhat 7.3 with with version lower than 0.9.8-1 openca complains and says that i have to use newer version.
Following is what my apache error log is showing. Using configuration from /usr/local/OpenCA/etc/openssl/openssl/CA_Operator.conf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'CA' organizationName :PRINTABLE:'NRNS Inc.' organizationalUnitName:PRINTABLE:'Internet' commonName :PRINTABLE:'Network Coordinator' serialNumber :PRINTABLE:'01' ERROR: adding extensions in section default 31839:error:2206D06C:X509 V3 routines:X509V3_parse_list:invalid null name:v3_utl .c:319: 31839:error:2206B069:X509 V3 routines:X509V3_EXT_conf:invalid extension string:v 3_conf.c:138:name=subjectAltName,section= 31839:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf .c:92:name=subjectAltName, value= General Error Trapped 6755: Error while opening /usr/local/OpenCA/var/crypto/certs/01.pem. OpenCA::X509 returns errorcode 7411021 (OpenCA::X509->new: Cannot initialize cer tificate (7412011) OpenCA::X509->initCert: No certificate present.). at /usr/local/OpenCA/lib/funct ions/misc-utils.lib line 38. Compilation failed in require at /usr/local/apache/cgi-bin/ca/ca line 193. ----- Original Message ----- From: "Michael Bell" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, July 27, 2002 12:15 PM Subject: Re: [Openca-Users] inital operator certificate problem > APM schrieb: > > > > I installed both openssl-0.9.8-1.i386.rpm. > > and openssl-devel-0.9.8-1.i386.rpm. > > 1. You need only an actual 0.9.7. These versions are much mor stable > than 0.9.8-snaps. > 2. What is the value of the option openssl in > OPENCADIR/etc/servers/ca.conf? This must be the correct openssl. You can > test it via openssl version. > 3. Check the content of > OPENCADIR/etc/openssl/(openssl|extfile)/CA_Operator.(conf|ext). > > Michael > > P.S. does OpenSSL don't report what is the problem with the extensions > (in Apache's error.log)? Normally there is a longer errormessage from > OpenSSL. > -- > ------------------------------------------------------------------- > Michael Bell Email (private): [EMAIL PROTECTED] > Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] > Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 > Unter den Linden 6 Fax: +49 (0)30-2093 2959 > 10099 Berlin > Germany http://www.openca.org > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Openca-Users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/openca-users > ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
