Thanks a lot! You got the point!
 I resigned a cacert of 4k length right now, and imported into the Mac's key 
chain successfully. It means that the recent Mac OS X only support 4k length 
public key.

Date: Thu, 25 Nov 2010 12:02:19 -0600
From: ehima...@gmail.com
To: openca-users@lists.sourceforge.net
Subject: Re: [Openca-Users] "Error -2147415740" when import root cert to Mac 
key chain

You can openssl your cacert.cer:
openssl x509 -inform pem -in cacert.cer -text
The length of your ca's key is 8192.I speculate that your "key and cert 
management software on Mac OS X" does not support 8192key length.

Hope it helps.



2010/11/25 王彬 <bluefantas...@hotmail.com>















    I built a root ca with openca 1.1.0, and it works excellent in nearly all 
the situations but Macintosh. The nightmare was began when I want to import my 
self-signed root certification into  the key chain (key and cert management 
software on Mac OS X ), I got a Error: -2147415740! It seems that the 
certification is not acceptable for Mac. I googled the error message and got a 
source file of Macintosh. The error message is defined in cssmerr.h for 
CSSMERR_CSP_INVALID_ATTR_KEY_LENGTH. I've no idea of which attribute key has 
invalid length. 
   The attachment is my root certification in X.509 format. Anybody can help 
me? Thanks a lot.                                    

------------------------------------------------------------------------------

Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!

Tap into the largest installed PC base & get more eyes on your game by

optimizing for Intel(R) Graphics Technology. Get started today with the

Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.

http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________

Openca-Users mailing list

Openca-Users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/openca-users





------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users                       
                  
------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to