C:\Apache\bin\CA>openssl ca -out cert.pem -config
./openssl.conf -infiles req.pem
Using configuration from ./openssl.conf Loading 'screen' into random state - done Enter pass phrase for ./private/cakey.pem: Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows organizationName :PRINTABLE:'Perfection Software, Inc.' organizationalUnitName:PRINTABLE:'https' localityName :PRINTABLE:'Pembroke Pines' stateOrProvinceName :PRINTABLE:'Florida' countryName :PRINTABLE:'US' The commonName field needed to be supplied and was missing How do I fix this? What am I supposed to put in the
policy_match commonName field?
The configuration file:
dir
= .
[ ca ]
default_ca = CA_default [ CA_default ]
serial = $dir/serial database = $dir/index.txt new_certs_dir = $dir/newcerts certificate = $dir/cacert.pem private_key = $dir/private/cakey.pem default_days = 3650 default_md = md5 preserve = no email_in_dn = no nameopt = default_ca certopt = default_ca policy = policy_match [ policy_match ]
countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional [ req ]
default_bits = 1024 # Size of keys default_keyfile = key.pem # Name of generated key default_md = md5 # message digest algorithm string_mask = nombstr # permitted characters distinguished_name = req_distinguished_name req_extensions = v3_req [ req_distinguished_name ]
# Variable name prompt string #-------------------------------------------------------------------------- 0.organizationName = Perfection Software, Inc. organizationalUnitName = PS emailAddress = [EMAIL PROTECTED] emailAddress_max = 40 localityName = Pembroke Pines stateOrProvinceName = Florida countryName = US countryName_min = 2 countryName_max = 2 commonName = perfectionsoftware.com commonName_max = 64 # Default values for the above, for consistency and less
typing.
# Variable name Value #----------------------------- ------------------------------------------ 0.organizationName_default = Perfection Software, Inc. localityName_default = Pembroke Pines stateOrProvinceName_default = Florida countryName_default = US [ v3_ca ]
basicConstraints = CA:TRUE subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always,issuer:always [ v3_req ]
basicConstraints = CA:FALSE subjectKeyIdentifier = hash |
- Re: error when trying to sign a certificate Steven R. Shourds
- Re: error when trying to sign a certificate Dr. Stephen Henson