> Most probably nothings wrong, except your programs if they expect
> certificates to be exactly 663 bytes long.  You see, a certificate can
> vary in size, depending on the subject, the issuer and the extensions
> you may have included.

Yes but my certificates were filled with the informations i found in their
tutorial.

> A different guess (remember, it's just a guess on my part) is that the
> freessl demo create X.509 v1 certificates (they don't have any
> extensions), and your programs might only accept v1 certificates.
> OpenSSL can create both v1 and v3 cerificates, and with the default
> configuration file, it will create v3 certificates.

> To help you further, it would be a good thing if I could see the
> certificates you mentioned (both the one that "works" and the one that
> doesn't) and the OpenSSL configuration file you used.

I edited the openssl.cnf file and i saw that you're right: my default
configuration file creates v3 certificates. How can i change that?
I have only .key and .der files with freessl demo: Are they files you want
to see? Do I send them to your private e-mail address?

Thank you

Sylvain Gaeremynck


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to