Hello,

I'm not able to generate TSA reply, while the command ends with con fig file 
errors.

1. attempt 

config file (name = "tsa.cnf":
---------------------------------
HOME                    = .
RANDFILE             = ./.rnd

[ tsa ]

serial             = TSA.serial
signer_cert   = TSA_cert.pem
signer_key    = TSA_privkey.pem
digests>        = md5,sha,sha-1
------------------------------------

error:

-------------------------
$ openssl ts -reply -config tsa.cnf -queryfile ~/file3.tsq -out file3-moje.tsr
Using configuration from config
variable lookup failed for tsa::default_tsa
Response is not generated.
-------------------------


2. attempt  (??!!)

config:

-----------------------
HOME                    = .
RANDFILE             = ./.rnd

[ tsa ]
default_tsa             = my_tsa

[ my_tsa ]
serial                  = TSA.serial
signer_cert         = TSA_cert.pem
signer_key          = TSA_privkey.pem
digests                = md5,sha,sha-1
-----------------------------------------

but, error again:
---------------------------
$ openssl ts -reply -config tsa.cnf -queryfile ~/file3.tsq -out file3-moje.tsr
Using configuration from tsa.cnf
Enter PEM pass phrase:
variable lookup failed for my_tsa::default_policy
Response is not generated.
139939723597472:error:0E06D06C:configuration file routines:NCONF_get_string:no 
value:conf_lib.c:335:group=my_tsa name=crypto_device
139939723597472:error:0E06D06C:configuration file routines:NCONF_get_string:no 
value:conf_lib.c:335:group=my_tsa name=certs
139939723597472:error:0E06D06C:configuration file routines:NCONF_get_string:no 
value:conf_lib.c:335:group=my_tsa name=default_policy
---------------------------------------------------------------


but all the asked variables are in man page only marked as OPTIONAL or DEFAULT 
!  Not mandatory.

I do not know what to set there and I do NOT want to set them

P.L.E.A.S.E  help.
OpenSSL 1.0.1 14 Mar 2012

--kapetr

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to