Error 700 (General Error The compilation of the command cmdIssueCertificate failed. openssl syntax for multi-valued RDNs is unknown at /usr/lib/perl5/vendor_perl/5.8.7/X500/DN.pm line 104).
Hello, when I want to create the certificate in the CA (Issue Button), I get the error message above. I think the reason can be found in the request from the cisco that send only this: ----------------------------------------------------------------- serialNumber=206, unstructuredName=ipsec-cisco-2610.XXXX.de+serialNumber=87CE1234 Role=Web Server Modulus (key size) 512 Public Key Algorithm rsaEncryption Public Key Modulus (512 bit): 00:b6:0a:f3:09:3f:49:39:5a:83:42:d0:..... Exponent: 65537 (0x10001) Signature Algorithm md5WithRSAEncryption ----------------------------------------------------------------- Are there some people, know what I have to do when I receive the request from cisco ? In RA I can EDIT this data in the request, before I make a export to CA and then import to CA. I found that the Error Message comes from the X500 Module. I think the modul do not know what the cisco request would send to the openssl interface. But what must be change ? In the cisco request I can only say "with or without IP address" and "with or without serial number" (crypto ca enroll XXX). In IOS 12.2(17) you can not give Subject (CN,OU,O,..) or Email or so. I think in the formular RA: "Edit the request" I have do change and/or add some things ? With this data, >>>>>>serialNumber=206, unstructuredName=ipsec-cisco-2610.XXXX.de+serialNumber=87CE1234<<<<< can I not ISSUE the certificate on the CA. --------------------------------------------------------------------------- An other question: Why put the cisco router 2 requests over scep into the RA Interface ? --------------------------------------------------------------------------- Regards Herbert -- 10 GB Mailbox, 100 FreeSMS/Monat http://www.gmx.net/de/go/topmail +++ GMX - die erste Adresse für Mail, Message, More +++ ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
