David W. Blaine wrote:
Hi all,

I have OpenCA 0.9.1 and I am creating my second sub-ca. I setup this sub-ca with no problems, however, when I try to generate a certificate from this sub-ca I get the following error in the apache logs:

entry 1: bad serial number length (3)


I tried reinitializing the openssl database and next serial number but that didn't help. I also checked for errors in index.txt. What could be the problem?

There can be several problems like wrong or missing timestamps, malformed serials ...


Can you please check that your index.txt is really empty if there are no certificates issued by this sub-CA? If I understand you correct then your Sub CA never issued a certificate so the following should do the job:

rm index.txt
touch index.txt

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to