ACK!
 
I found the problem.
 
The O'Reilly code sample omitted the line of code:
 
    X509_REQ_set_version(pRequest, 0L);
 
 
This line is NOT optional! If it is omitted, dumping the CSR with openssl.exe shows a version of 0, but still something is not right in the CSR.
 
With the above line of code added to my sample, now both Verisign and Microsoft Certificate Server can sign the CSR with no problems.
 
Thanks for the help anyway!

 

Reply via email to