In message <[EMAIL PROTECTED]> on Wed, 10 Nov 2004 17:08:33 +0000, System 
Administrator <[EMAIL PROTECTED]> said:

sysadmin> I wonder if anyone might be able to shed some light on a very
sysadmin> strange phenomena we're seeing when we try to generate CSRs.
sysadmin> 
sysadmin> I can create a key with
sysadmin> :openssl genrsa ...
sysadmin> and then I creat a certificate signing request with
sysadmin> :openssl req -new -key keyfile.key -out csrfile.csr
sysadmin> 
sysadmin> This goes through the normal questions, and creates the file
sysadmin> "csrfile.csr" without any complaints.
sysadmin> 
sysadmin> When I try to use this csr to generate a self-signed
sysadmin> certificate I invariably get "signature did not match the
sysadmin> certificate request".

Could you please show us what command you used to do that?

sysadmin> Further investigation leads to the fact that each new
sysadmin> repetition of the same csr using the same key always
sysadmin> produces a different signature on the csr, on one server,
sysadmin> and yet the same key on a different server ALWAYS produces
sysadmin> the same CSR (given the same DN and so on of course)

And the OpenSSL version on that other server is?

-----
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte                         [EMAIL PROTECTED]
                                        http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
                                                -- C.S. Lewis
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to