Hello
I are going to try to get a vpn server certificate for a CheckPoint Firewall-1 NG AI (R55) using OpenCA 0.9.2-RC1
After installing my root CA (no problem about it) and generate certificate request on firewall management I submit that file (pem) to openca.
Note I can edit that request and accept them for issuing certificate, but on signing request I get the folliwong error:
*Error 6751*
*General Error*. Error while issuing Certificate to fw5301.sai.it (filename: /usr/local/OpenCA/var/tmp/02.req).
OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert: OpenSSL fails (256: Using configuration from /usr/local/OpenCA/etc/openssl/openssl/VPN_Server.conf
Error reading certificate request in /usr/local/OpenCA/var/tmp/02.req
15950:error:0906D066:PEM routines:PEM_read_bio:bad end line:pem_lib.c:731:
).)..
Using OpenCa0.9.1 stable 5 I cannot insert certificate request...
Can you send us a sample request? The errormessage from OpenSSL indicates that there is a problem with the request. To be more exact, OpenSSL don't know where does the request end. This can happen because of three problems:
1. the request has a wrong format at all 2. the last line is damaged or missing 3. OpenSSL tries to find a non present newline at the end of the last line
A sample request of such a firewall would allow us to simulate the problem.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
