> As said, the steps look just fine, but it might be a problem with your > CA certificate/configuration. Can you please send your CA certificate > to the list so that I can verify my assumption that you're missing > the subjectKeyIdentifier extension on your CA certificate?
Here it is: cacert.pem -----BEGIN CERTIFICATE----- MIIDKjCCAhKgAwIBAgIJAJeWkvxnRey2MA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNV BAYTAlJVMQ4wDAYDVQQKEwVJTkRFQzEPMA0GA1UECxMGQ3liT3JnMRIwEAYDVQQD EwljeWJvcmcuc3UwHhcNMDkwMTI4MTYyMDUzWhcNMTAwMTI4MTYyMDUzWjBCMQsw CQYDVQQGEwJSVTEOMAwGA1UEChMFSU5ERUMxDzANBgNVBAsTBkN5Yk9yZzESMBAG A1UEAxMJY3lib3JnLnN1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA lVZg1zJlJe9NFzIwIa1R1z46ql/f8eQ8HvQn/NEzzexQJQI67Sq6oIvEms8FvR8t SmIPzXI7f2kYIab/2q5Ddxzu88od90gE9O9IwclHBCH46zV+XddfAnjqBMobwxAP OQXs4wf7wqe61tknLaoDyENn6yw89S2Umxjv1HQ+hM8f5sOBnxdyKz5mSknHRAxr ojv84OUKu8zo8G98tztcEiCrECUnqQv0StGIvUbIUki6UQGgz50Inx0O4YAJOkpv nrOflXdbSQ5X3ng/TQqX0WcFJkCT1CoFnDVzCcwCSpcTAml+vVN681/D4ozh4ttn rIBhZwe3ZFmF3c3wtOX9TwIDAQABoyMwITAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T AQH/BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAbi2l1mEQvY4HviVJtXjD4m3b FpecIALQi9Mkg0/pZDLNz7Znk3OLmEfYSeC+h3NCwNOG8icPRUpmdk3CapSw4dB9 UgH41Ll7JlgySg9cwpM7A/2ghgyCF3K3SFhhTNnRKX0wsdHRPTlB5MyQGvsR4st0 rVjeyWBbSoXQ4V+OhwjgCEkLEnk878Xd5Hxgu//6RCoMjBGx3Prc0p3Lj218VUte /+bghBpvAXkHajiRF34raKrWtLyM71tPmAseV/ZJ3ONXARYKveh0d4/SqeXS6DHB d/V8PmhUDrbCG0fa4pmw59OgiUd0RYk/vD21/u4ZayAwu/X9R+m4chDn9MwLUw== -----END CERTIFICATE----- -- With best regards, Chudnovskaya Elvira ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
