C:\Apache\bin\CA>openssl ca -out cert.pem -config ./openssl.conf -infiles req.pem
Using configuration from ./openssl.conf
Loading 'screen' into random state - done
Enter pass phrase for ./private/cakey.pem:
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
organizationName      :PRINTABLE:'Perfection Software, Inc.'
organizationalUnitName:PRINTABLE:'https'
localityName          :PRINTABLE:'Pembroke Pines'
stateOrProvinceName   :PRINTABLE:'Florida'
countryName           :PRINTABLE:'US'

The commonName field needed to be supplied and was missing
 
How do I fix this? What am I supposed to put in the policy_match commonName field?
 
The configuration file:
 
dir                     = .
 
[ ca ]
default_ca  = CA_default
 
[ CA_default ]
serial   = $dir/serial
database  = $dir/index.txt
new_certs_dir  = $dir/newcerts
certificate  = $dir/cacert.pem
private_key  = $dir/private/cakey.pem
default_days  = 3650
default_md  = md5
preserve  = no
email_in_dn  = no
nameopt   = default_ca
certopt   = default_ca
policy   = policy_match
 
[ policy_match ]
countryName  = match
stateOrProvinceName = match
organizationName = match
organizationalUnitName = optional
commonName  = supplied
emailAddress  = optional
 
[ req ]
default_bits  = 1024   # Size of keys
default_keyfile  = key.pem  # Name of generated key
default_md  = md5   # message digest algorithm
string_mask  = nombstr  # permitted characters
distinguished_name = req_distinguished_name
req_extensions  = v3_req
 
[ req_distinguished_name ]
# Variable name    prompt string
#--------------------------------------------------------------------------
0.organizationName = Perfection Software, Inc.
organizationalUnitName = PS
emailAddress  = [EMAIL PROTECTED]
emailAddress_max = 40
localityName  = Pembroke Pines
stateOrProvinceName = Florida
countryName  = US
countryName_min  = 2
countryName_max  = 2
commonName  = perfectionsoftware.com
commonName_max  = 64
 
# Default values for the above, for consistency and less typing.
# Variable name      Value
#-----------------------------    ------------------------------------------
0.organizationName_default  = Perfection Software, Inc.
localityName_default   = Pembroke Pines
stateOrProvinceName_default  = Florida
countryName_default   = US
  
 
[ v3_ca ]
basicConstraints = CA:TRUE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
 
[ v3_req ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash

Reply via email to