Re: [Openca-Users] inital operator certificate problem

[APM <All...@nr...>]

Just a note. I noticed that from the log below it
shows serialNumber is 01 (serialNumber          :PRINTABLE:'01'),
however when I created the first initial administrator certificate and
view it, Serial Number has a value of 256.
Goodness, it's now making me dizzy. :-)




----- Original Message -----
From: "APM" <All...@nr...>
To: "Michael Bell" <mic...@rz...>
Cc: <ope...@li...>
Sent: Monday, July 29, 2002 12:51 PM
Subject: Re: [Openca-Users] inital operator certificate problem


> Im using openssl-0.9.8-1.i386.rpm and openssl-devel-0.9.8-1.i386.rpm
> because if i configure openca-0.9-RC1.tar.gz on redhat 7.3 with
> with version lower than 0.9.8-1 openca complains and says
> that i have to use newer version.
>
>
> Following is what my apache error log is showing.
>
> Using configuration from
/usr/local/OpenCA/etc/openssl/openssl/CA_Operator.conf
> Check that the request matches the signature
> Signature ok
> The Subject's Distinguished Name is as follows
> countryName           :PRINTABLE:'CA'
> organizationName      :PRINTABLE:'NRNS Inc.'
> organizationalUnitName:PRINTABLE:'Internet'
> commonName            :PRINTABLE:'Network Coordinator'
> serialNumber          :PRINTABLE:'01'
> ERROR: adding extensions in section default
> 31839:error:2206D06C:X509 V3 routines:X509V3_parse_list:invalid null
name:v3_utl
> .c:319:
> 31839:error:2206B069:X509 V3 routines:X509V3_EXT_conf:invalid extension
string:v
> 3_conf.c:138:name=subjectAltName,section=
> 31839:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in
extension:v3_conf
> .c:92:name=subjectAltName, value=
> General Error Trapped 6755: Error while opening
> /usr/local/OpenCA/var/crypto/certs/01.pem.
> OpenCA::X509 returns errorcode 7411021 (OpenCA::X509->new: Cannot initialize
cer
> tificate (7412011)
> OpenCA::X509->initCert: No certificate present.). at
/usr/local/OpenCA/lib/funct
> ions/misc-utils.lib line 38.
> Compilation failed in require at /usr/local/apache/cgi-bin/ca/ca line 193.
>
>
> ----- Original Message -----
> From: "Michael Bell" <mic...@rz...>
> Cc: <ope...@li...>
> Sent: Saturday, July 27, 2002 12:15 PM
> Subject: Re: [Openca-Users] inital operator certificate problem
>
>
> > APM schrieb:
> > >
> > > I installed both  openssl-0.9.8-1.i386.rpm.
> > > and openssl-devel-0.9.8-1.i386.rpm.
> >
> > 1. You need only an actual 0.9.7. These versions are much mor stable
> > than 0.9.8-snaps.
> > 2. What is the value of the option openssl in
> > OPENCADIR/etc/servers/ca.conf? This must be the correct openssl. You can
> > test it via openssl version.
> > 3. Check the content of
> > OPENCADIR/etc/openssl/(openssl|extfile)/CA_Operator.(conf|ext).
> >
> > Michael
> >
> > P.S. does OpenSSL don't report what is the problem with the extensions
> > (in Apache's error.log)? Normally there is a longer errormessage from
> > OpenSSL.
> > --
> > -------------------------------------------------------------------
> > Michael Bell                   Email (private): mic...@we...
> > Rechenzentrum - Datacenter     Email:  mic...@rz...
> > Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
> > Unter den Linden 6             Fax:  +49 (0)30-2093 2959
> > 10099 Berlin
> > Germany                                       http://www.openca.org
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Openca-Users mailing list
> > Ope...@li...
> > https://lists.sourceforge.net/lists/listinfo/openca-users
> >
>