[Openca-Users] openca error 6761

[Lizner M. <ml...@an...>]

hello

i've encountered this error during issuing first certificates - ca
operator and ra server - the ca certificate was issued with no problem:

Error 6761

                    General Error. Error while signing Role of CA Operator

                    (file name: /usr/local/openca_ca/var/tmp/01.sig ).
                    OpenCA::OpenSSL returns errorcode 7743071
(OpenCA::OpenSSL->sign: openca-sign failed (-1).)..

apache log:

Using configuration from
/usr/local/openca_ca/etc/openssl/openssl/CA_Operator.conf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'CZ'
organizationName      :PRINTABLE:'Company'
organizationalUnitName:PRINTABLE:'Trustcenter'
commonName            :PRINTABLE:'CA Operator'
serialNumber          :PRINTABLE:'01'
Certificate is to be certified until Aug 30 11:42:24 2003 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
General Error Trapped 6761: Error while signing Role of CA
Operator<BR><BR>(file name: /usr/local/openca_ca/var/tmp/01.sig ).<br>
OpenCA::OpenSSL returns errorcode 7743071 (OpenCA::OpenSSL->sign:
openca-sign failed (-1).). at
/usr/local/openca_ca/lib/functions/misc-utils.lib line 38.
Compilation failed in require at /usr/local/apache/cgi-bin/ca/ca line 194.

what are the possible causes ? - the same problem i've encountered on
0.9.1-rc3 and 4 with openssl snapshot from july and openssl-0.9.7-beta3.

on my test machine i do not encounter that, only when i transfer all
compiled components to a new production like machine - both redhat 7.2 the
new one has the same /usr/lib/perl5, /usr/local/ssl, /usr/local/apache,
/usr/local/mysql, /usr/local/openca_ca, it has the same rpms removed, it
has the same rigts, same accounts, same ld.so.conf - i really am stuck :).
the new machine has no compiler, only make.

thank you

martin lizner
www.anect.com
czech rep.