Thanks Micheal, Chimaw, With the help of this nice "OpenCA Guide" i'm beginning to understand now. Beside of this it is no good idea to use the *.debs i mentioned earlier (nothing for productive use). It's better to use the source, Luke.
Simon > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Michael > Bell > Sent: Saturday, October 25, 2003 4:05 PM > To: [EMAIL PROTECTED] > Subject: Re: [Openca-Users] CertReq: Backend exited with errorcode 0 - > Error 7211021 > > > Simon Liebold wrote: > > Hi, > > I installed OpenCA yesterday from some Debian-Packages i found here: > > http://www.microcomaustralia.com.au/debian/pool/main/o/openca/ > > > > OpenCA is what i was looking for and found it by accident. > However there are > > always initial problems. I might have misconfigurated some stuff... > > > > The creation of the cert-request of the first user (initial > administrator) > > does not work: > > Error 7211021 > > General Error. Cannot create request! > > > > (OpenCA::REQ->new: Cannot create new request. > > Backend fails with errorcode 0 > > ). > > > > Apache's error log says: > > ---/var/log/apache-ssl/error.log--- > > Generating RSA private key, 1024 bit long modulus > > ........++++++ > > ...........++++++ > > e is 65537 (0x10001) > > Enter Encryption Password: > > unknown option -subj > > req [options] <infile >outfile > > where options are > > -inform arg input format - DER or PEM > > -outform arg output format - DER or PEM > > -in arg input file > > ---/var/log/apache-ssl/error.log--- > > How can set OpenCA not to pass this option "-subj" to openssl? > > OpenCA requires this option from OpenSSL. The problem is that this > option is only available on OpenSSL 0.9.7. If you install a debian then > you must install OpenSSL 0.9.7 from Debian testing or unstable (sid). > The problem is that I don't know what is the path configuration in your > debianpackages. Check the OpenCA configurationfiles for the variable > OpenSSL (/etc/openca/servers/*.conf). It must be the binary of an > OpenSSL 0.9.7. "openssl version" shows you the actual version. > > Michael > -- > ------------------------------------------------------------------- > Michael Bell Email: [EMAIL PROTECTED] > ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 > (Computing Centre) Fax: +49 (0)30-2093 2704 > Humboldt-University of Berlin > Unter den Linden 6 > 10099 Berlin Email (private): [EMAIL PROTECTED] > Germany http://www.openca.org > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: The SF.net Donation Program. > Do you like what SourceForge.net is doing for the Open > Source Community? Make a contribution, and help us add new > features and functionality. Click here: http://sourceforge.net/donate/ > _______________________________________________ > Openca-Users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/openca-users > ------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
