You can openssl your cacert.cer:
openssl x509 -inform pem -in cacert.cer -text
The length of your ca's key is 8192.
I speculate that your "key and cert management software on Mac OS X" does
not support 8192key length.
Hope it helps.
2010/11/25 王彬 <bluefantas...@hotmail.com>
>
>
> I built a root ca with openca 1.1.0, and it works excellent in nearly
> all the situations but Macintosh. The nightmare was began when I want to
> import my self-signed root certification into the key chain （key and cert
> management software on Mac OS X ), I got a Error: -2147415740! It seems that
> the certification is not acceptable for Mac. I googled the error message and
> got a source file of Macintosh. The error message is defined in cssmerr.h
> for CSSMERR_CSP_INVALID_ATTR_KEY_LENGTH. I've no idea of which attribute
> key has invalid length.
> The attachment is my root certification in X.509 format. Anybody can help
> me? Thanks a lot.
>
>
> ------------------------------------------------------------------------------
> Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
> Tap into the largest installed PC base & get more eyes on your game by
> optimizing for Intel(R) Graphics Technology. Get started today with the
> Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
> http://p.sf.net/sfu/intelisp-dev2dev
> _______________________________________________
> Openca-Users mailing list
> Openca-Users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openca-users
>
>
------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users
