This is an issue with the openssl command line that is called but I haven't
found a good workaround yet. Any help appreciated. 

Dave
 

dblaine wrote:
> 
> I now get past the request phase. I am now in the CA interface when I try 
> to generate the certificate. I get the following:
> 
> 
> Error Code: 6761 
> 
> 
>  
> Error while issuing Certificate(ilt) to xfstest.gdls.com (filename: 
> /appl/openca-1.0.2/openca/var/openca/tmp/22AE.req). 
> 
> 
> OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert: 
> OpenSSL fails (7777067). unknown option openssl
> usage: ca args
> 
> -verbose - Talk alot while doing things
> -config file - A config file
> -name arg - The particular CA definition to use
> -gencrl - Generate a new CRL
> -crldays days - Days is when the next CRL is due
> -crlhours hours - Hours is when the next CRL is due
> -startdate YYMMDDHHMMSSZ - certificate validity notBefore
> -enddate YYMMDDHHMMSSZ - certificate validity notAfter (overrides -days)
> -days arg - number of days to certify the certificate for
> -md arg - md to use, one of md2, md5, sha or sha1
> -policy arg - The CA 'policy' to support
> -keyfile arg - private key file
> -keyform arg - private key file format (PEM or ENGINE)
> -key arg - key to decode the private key if it is encrypted
> -cert file - The CA certificate
> -selfsign - sign a certificate with the key associated with it
> -in file - The input PEM encoded certificate request(s)
> -out file - Where to put the output file(s)
> -outdir dir - Where to put output certificates
> -infiles .... - The last argument, requests to process
> -spkac file - File contains DN and signed public key and challenge
> -ss_cert file - File contains a self signed cert to sign
> -preserveDN - Don't re-order the DN
> -noemailDN - Don't add the EMAIL field into certificate' subject
> -batch - Don't ask questions
> -msie_hack - msie modifications to handle all those universal strings
> -revoke file - Revoke a certificate (given in file)
> -subj arg - Use arg instead of request's subject
> -utf8 - input characters are UTF8 (default ASCII)
> -multivalue-rdn - enable support for multivalued RDNs
> -extensions .. - Extension section (override value in config file)
> -extfile file - Configuration file with X509v3 extentions to add
> -crlexts .. - CRL extension section (override value in config file)
> -engine e - use engine e, possibly a hardware device.
> -status serial - Shows certificate status given the serial number
> -updatedb - Updates db for expired certificates
> error in ca
> openssl:Error:
> 
> 
> 't/CN=one/CN=two/CN=three/CN=four..../CN=thir' is an invalid command.
> 
> As you can see the command is cut off due to the command line length 
> exceeded.
> 
> 
> Help!
> 
> Dave
> 
> 
> This is an e-mail from General Dynamics Land Systems. It is for the
> intended recipient only and may contain confidential and privileged
> information.  No one else may read, print, store, copy, forward or act in
> reliance on it or its attachments.  If you are not the intended recipient,
> please return this message to the sender and delete the message and any
> attachments from your computer. Your cooperation is appreciated.
> 
> 
>  
> ------------------------------------------------------------------------------
> EMC VNX: the world's simplest storage, starting under $10K
> The only unified storage solution that offers unified management 
> Up to 160% more powerful than alternatives and 25% more efficient. 
> Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev
> _______________________________________________
> Openca-Users mailing list
> Openca-Users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openca-users
> 
> 

-- 
View this message in context: 
http://old.nabble.com/Re%3A-How-to-generate-a-certificate-with-lots-of-CN%27s-tp32344471p32955453.html
Sent from the openca-users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to