Re: Re: [Openca-Users] problem issuing Firewall-1 NG vpn certificate

[pierluigi . garino]

Hi Michael

here you are a sample request.

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Thanks

Pierluigi


Can you send us a sample request? The errormessage from OpenSSL
indicates that there is a problem with the request. To be more exact,
OpenSSL don't know where does the request end. This can happen because
of three problems:

1. the request has a wrong format at all
2. the last line is damaged or missing
3. OpenSSL tries to find a non present newline at the end of the last line

A sample request of such a firewall would allow us to simulate the problem.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



>
> Hello
>
> I are going to try to get a vpn server certificate for a CheckPoint
> Firewall-1 NG AI (R55) using OpenCA 0.9.2-RC1
>
> After installing my root CA (no problem about it) and generate
> certificate request on firewall management I submit that file (pem) to
> openca.
>
> Note I can edit that request and accept them for issuing certificate,
> but on signing request I get the folliwong error:
>
> *Error 6751*
> *General Error*. Error while issuing Certificate to fw5301.sai.it
> (filename: /usr/local/OpenCA/var/tmp/02.req).
>
>
> OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert:
> OpenSSL fails (256: Using configuration from
> /usr/local/OpenCA/etc/openssl/openssl/VPN_Server.conf
> Error reading certificate request in /usr/local/OpenCA/var/tmp/02.req
> 15950:error:0906D066:PEM routines:PEM_read_bio:bad end line:pem_lib.c:731:
> ).)..
>
> Using OpenCa0.9.1 stable 5 I cannot insert certificate request...