Re: [Openca-Users] Openca Problem in Phase II

[Diego I. Rosso]

in Phase I,   Request Setup Generate new CA Certificate Request (use generated secret key) In this Step, here are my info   [EMAIL PROTECTED], CN=SoporteCa, OU=CAPRUEBA1, O=CAPRUEBA, C=AR     Then ask me for my capassword, and show my CA request perfectly.   On Phase II here is my info:   Following are listed data received. Please check carefully information here reported with the ones in your possession. E-Mail: [EMAIL PROTECTED] Name: Diego Ignacio Rosso Certificate Request Group: Internet Role CA Operator Registration Authority Trustcenter itself PIN: ********** Keysize: 2048 If there are no errors, use the Continue button to submit the request. In case there are some problems with the displayed data, just use your browser's back button to go to the referring page and modify data.   , my new compile info     VER=0.9.2-1 PREFIX=/usr/local/openca.${VER}   ./configure \   --prefix=${PREFIX} \   --with-httpd-user=nobody \   --with-httpd-group=nobody \   --with-openca-prefix=${PREFIX}/openca \   --with-etc-prefix=${PREFIX}/openca/etc \   --with-httpd-fs-prefix=${PREFIX}/httpd \   --with-module-prefix=${PREFIX}/modules \   --with-openssl-prefix=/usr/local/ssl \   --with-engine=no \   --with-web-host=pki.prueba.gov.ar \   --with-ca-organization="PruebaCA" \   --with-ca-country="Argentina" \   --with-ca-locality="Distrito Federal" \   --with-ldap-port=389 \   --with-ldap-root="cn=AdminCA,o=PruebaCA,c=AR" \   --with-ldap-root-pwd="openca" \   --enable-ocspd=yes \   --disable-db \   --disable-dbi \   --disable-rbac \   --with-hierarchy-level=ca \   --with-service-mail-account="[EMAIL PROTECTED]"   ----- Original Message ----- From: dalini To: [EMAIL PROTECTED] Sent: Monday, March 08, 2004 3:45 PM Subject: Re: [Openca-Users] Openca Problem in Phase II Diego I. Rosso wrote: > Chris I change that to AR, compile again, but I recieve the same error! > http://192.168.1.10/cgi-bin/ca/ca?cmd=setupInitialCert;dest=basic_csr;CSR_TYPE=basic > [Mon Mar 08 14:44:14 2004] [error] [client 192.168.1.100] > 28920:error:0D07A097:asn1 encoding routines:ASN1_mbstring_copy:string > too long:a_mbstr.c:154:maxsize=2, referer: > http://192.168.1.10/cgi-bin/ca/ca?cmd=setupInitialCert;dest=basic_csr;CSR_TYPE=basic >  are you sure - u changed the country attribute in your request too? (not just in the setup for ldap...) because the error says: ASN1_mbstring_copy:string too long:a_mbstr.c:154:maxsize=2 so - that means - your string is longer than 2 characters... the string in the request which should be signed... so it can't because it doesn't match the policy rule... greetings dalini ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users