Well... I've gotten a little bit further.  I apologize for these elementary
questions, I just have never used this before.
I used the default openssl.cnf file rather than one I created.

I got the CA to approve the request (a test certificate).
I copied the information into a *.crt file.  However, the web site does not
work.  I get a 404 bad request error.  

I am sure there is something I have to do in the httpd.cnf file, but I don't
know what I need to configure in there.  I tried making some changes that to
me seemed logical, but after the changes the HTTP server would not start, so
I reverted back to original.

-----Original Message-----
From: Dr S N Henson [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 08, 2000 1:06 PM
To: [EMAIL PROTECTED]
Subject: Re: Creating a certificate request




"Kalligonis, Tim" wrote:
> 
> I actually just found some information about the -config option.  Using
the
> -config option I was able to create the csr file but it was not accepted
by
> the certificate authority Thawte.  This is the error I am receiving:
> The actual error given was:
> 
> We accept two broad forms of CSR.  The preferable one is a BASE64
> encoded PKCS#10 Certificate Signing Request.  The other format is the
> PEM Message format generated by early Domino, ICSS and WebSite Pro 1.x
> web servers.
> 
> What do I need to to to avoid this error while trying to submit the
request?
> 

Try the -newhdr option, it may want NEW in the header lines.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to