Just a note. I noticed that from the log below it shows serialNumber is 01 (serialNumber :PRINTABLE:'01'), however when I created the first initial administrator certificate and view it, Serial Number has a value of 256. Goodness, it's now making me dizzy. :-)
----- Original Message ----- From: "APM" <[EMAIL PROTECTED]> To: "Michael Bell" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, July 29, 2002 12:51 PM Subject: Re: [Openca-Users] inital operator certificate problem > Im using openssl-0.9.8-1.i386.rpm and openssl-devel-0.9.8-1.i386.rpm > because if i configure openca-0.9-RC1.tar.gz on redhat 7.3 with > with version lower than 0.9.8-1 openca complains and says > that i have to use newer version. > > > Following is what my apache error log is showing. > > Using configuration from /usr/local/OpenCA/etc/openssl/openssl/CA_Operator.conf > Check that the request matches the signature > Signature ok > The Subject's Distinguished Name is as follows > countryName :PRINTABLE:'CA' > organizationName :PRINTABLE:'NRNS Inc.' > organizationalUnitName:PRINTABLE:'Internet' > commonName :PRINTABLE:'Network Coordinator' > serialNumber :PRINTABLE:'01' > ERROR: adding extensions in section default > 31839:error:2206D06C:X509 V3 routines:X509V3_parse_list:invalid null name:v3_utl > .c:319: > 31839:error:2206B069:X509 V3 routines:X509V3_EXT_conf:invalid extension string:v > 3_conf.c:138:name=subjectAltName,section= > 31839:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf > .c:92:name=subjectAltName, value= > General Error Trapped 6755: Error while opening > /usr/local/OpenCA/var/crypto/certs/01.pem. > OpenCA::X509 returns errorcode 7411021 (OpenCA::X509->new: Cannot initialize cer > tificate (7412011) > OpenCA::X509->initCert: No certificate present.). at /usr/local/OpenCA/lib/funct > ions/misc-utils.lib line 38. > Compilation failed in require at /usr/local/apache/cgi-bin/ca/ca line 193. > > > ----- Original Message ----- > From: "Michael Bell" <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sent: Saturday, July 27, 2002 12:15 PM > Subject: Re: [Openca-Users] inital operator certificate problem > > > > APM schrieb: > > > > > > I installed both openssl-0.9.8-1.i386.rpm. > > > and openssl-devel-0.9.8-1.i386.rpm. > > > > 1. You need only an actual 0.9.7. These versions are much mor stable > > than 0.9.8-snaps. > > 2. What is the value of the option openssl in > > OPENCADIR/etc/servers/ca.conf? This must be the correct openssl. You can > > test it via openssl version. > > 3. Check the content of > > OPENCADIR/etc/openssl/(openssl|extfile)/CA_Operator.(conf|ext). > > > > Michael > > > > P.S. does OpenSSL don't report what is the problem with the extensions > > (in Apache's error.log)? Normally there is a longer errormessage from > > OpenSSL. > > -- > > ------------------------------------------------------------------- > > Michael Bell Email (private): [EMAIL PROTECTED] > > Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] > > Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 > > Unter den Linden 6 Fax: +49 (0)30-2093 2959 > > 10099 Berlin > > Germany http://www.openca.org > > > > > > ------------------------------------------------------- > > This sf.net email is sponsored by:ThinkGeek > > Welcome to geek heaven. > > http://thinkgeek.com/sf > > _______________________________________________ > > Openca-Users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/openca-users > > > ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
