On Mon, Sep 19, 2011, Gabriel Marques wrote: > Hello folks, > > I'm developing a tool for signing digital TV apps, and for testing > I'm creating a lot of different test scenarios. > > Well, using OpenSSL 1.0.0e to create a new certificate, signed by a > snakeoil one I got the following error: > --> The stateOrProvinceName field needed to be the same in the > --> CA certificate (SP) and the request (SP) > > As it was just a test, I've changed openssl.conf to: > ... > [ policy_match ] > countryName = match > stateOrProvinceName = optional > organizationName = match > ... > > But then I get: > --> The organizationName field needed to be the same in the > --> CA certificate (ACME SA) and the request (ACME SA) > > I can just put everithing as optional, as it's just a test scenario > and this issue is not in the scope of the test, but it made me > wonder what was going on, as the Ubuntu distro version of OpenSSL > (0.98 k) was not complaining, with the same conf. file. >
This is expected behaviour. You can use the policy_anything policy instead which is far less strict. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
