|
From: Alireza K. <ili...@ya...> - 2013-02-07 13:05:49
|
hello I used EJBCA (4.0.13) to issue a certificate for PDF signing. everything seemed good and documents got signed! now when I opens my PDF in adobe reader it tries to validate certificate against the CRL with my CDP. it can access it but it gives me an error that "Issuer names mismatch". I used these commands to check the issuer names: >>openssl x509 -in signing.pem -issuer -noout >>openssl crl -in crl.pem -issuer -noout and this is the output: openssl x509 -in test.pem -issuer -noout issuer= /CN=AdminCA1/O=EJBCA Sample/C=SE openssl crl -in crl.pem -issuer -noout issuer=/CN=AdminCA1/O=EJBCA Sample/C=SE as you can see there is space character in the beginning of certificate issuer DN. I googled this and came to see there are some discussions about this and assumed that this is a bug (in opnessl maybe)! but no solutions! I could not find any related configuration in EJBCA to solve this and yet I'm not sure even that this is a bug! did anybody encountered such a problem? is this a bug in EJBCA? any help or guide will be appreciated! |