Entrust certificates with Apache/openSSL

[Aurobindo (Robin) Sundaram (+1 512 331 3743)]

Hi,

We're having problems loading a custom certificate into an Apache 
web-server. Has anyone seen these errors, and if so, how do we fix them? It 
appears to be an Entrust/openSSL issue, since Verisign certs can be loaded.

Apologies if this question is not on the list's charter.

Thanks,
Robin

....................................................................
Objective: To generate and use a web-server-certificate from the SLB 
Entrust CA

Platform: Apache 1.3.12 +OpenSSL 0.9.4 on Solaris
Error: The certificate is not being recognized
Error message:
hawkeye:> openssl x509 -noout -text -in hobbes.crt
unable to load certificate
20026:error:0D0A2007:asn1 encoding routines:d2i_X509_CINF:expecting an asn1 
sequence:x_cinf.c:106:address=1128100 offset=0
20026:error:0D09F004:asn1 encoding routines:d2i_X509:nested asn1 
error:x_x509.c:99:address=1128096 offset=4
20026:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:239:

Sequence of steps:
1) Generated a web-server-certificate using Entrust admin, with 
authorization A, and reference R
2) Used the reference R as the cn in the certificate signing request (CSR) 
on Apache/openssl
3) Used the CSR, R, and A on an Entrust Web-Connector web-page to retrieve 
"hobbes.crt", the PKCS7 encoding of the cert
4) When verifying hobbes.crt, we got the error message above.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]