> If I will generate Certificat for RA (request is done) the folowing > Error occurse ??? > > Error while issuing Certificate to Hartmut Lang (filename: > /usr/local/var/openca/tmp/8DF5831530BA55C43E5A.req). > > > OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert: > OpenSSL fails (7777067). Using configuration from > /usr/local/etc/openca/openssl/openssl/User.conf
> failed to update database > TXT_DB error number 2 > 3074037960:error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first > num too large:a_object.c:109: > error in ca > ). Sounds this: === You may see this when trying to generate a new SSL certificate, but the same DN (the common name, etc.) was used before (and recorded in index.txt). Many people should see this error, because we frequently rotate SSL certificates with new ones for additional security ;) You may then discover the fix is to set 'unique_subject = no' in openssl.cnf, but find that it still doesn't work. This is because when initialising the CA, the setting was duplicated into index.txt.attr to confuse you. === ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk _______________________________________________ Openca-Users mailing list Openca-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-users
