Dr Stephen Henson wrote:
> jagad wrote:
> >
> > Hi All,
> >
> > I have generate Cert using OpenSSL and it's works fine, but when I try to
> > generate Cert, then I've got the error:
> >
> > Error Loading Extension section usr_cert
> > .....: X509 V3 routines: v2i_GENERAL_NAME: missing value .....
> >
> > I never change anything, did I missed something?
> >
> > Thanks in Advance
> >
>
> What does the usr_cert section of the config file look like?
>
> Steve.
The usr_cert section of the .cnf file you are using to generate certs
specifies the contents of the X509 V3 extension section of the cert
that contains things like 'subjectAltName' that can be used for binding
a second name (some times an email name) into the cert.
The data values in this section have a format I haven't seen documented
but from reading the code the following are valid:
subjectAltName=email:copy
subjectAltName=issuerl:copy
subjectAltName=email:[EMAIL PROTECTED]
subjectAltName=DNS:www.company.com
subjectAltName=IP:100.99.98.97
subjectAltName=RID:2.99999.1
and ones that work in other sections are invalid such as:
subjectAltName=ENV::environment_variable
I got error messages like you are seeing while playing in the
usr_cert section.
- Rod
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
