Well, I can answer my own question here. This occurs when you put the
exact same information in your certificate as you have in your CA.
Skadz
Ryan P Skadberg writes:
> Hopefully someone has an answer to this. I saw the question once in
> the archives, but no answers :(
>
> I have compiled and installed bother OpenSSL 0.9.3 and 0.9.3a and have
> the same problem with both. I used:
>
> ./config rsaref -L`pwd`/rsaref-2.0/local
>
> It used solaris-usparc-oldgcc as the platform. Make test seemed ok.
> O then did a make install, and added /usr/local/ssl/bin to my path.
>
> I ran the following:
>
> /usr/local/ssl/misc/CA.pl -newca
> /usr/local/ssl/misc/CA.pl -newreq
> /usr/local/ssl/misc/CA.pl -sign
>
> These all seemed fine. I then ran:
>
> openssl verify -verbose -CAfile cacert.pem newcert.pem
>
> And I got:
>
> newcert.pem: /C=US/ST=Texas/L=Austin/O=CT/CN=The Admin
> [EMAIL PROTECTED]
> error 7 at 0 depth lookup:certificate signature failure
> 15676:error:1E06F401:RSAref
> routines:RSA_REF_PUBLIC_DECRYPT:data:rsaref.c:254:
> 15676:error:0D079006:asn1 encoding routines:ASN1_verify:bad get asn1
> object call:a_verify.c:106:
>
> I also tried very similar stuff on a linux box and got pretty much the
> same error. I tried searching through whatever I could find and have
> yet to come up with an answer, so any help would be appreciated.
>
> Thanks!
> Skadz
>
> --
> Ryan Skadberg | "there's a space beside us
> Ytsejam Moderator | and there's miles between us
> [EMAIL PROTECTED] | and all around us
> http://www.dreamt.org/ | grows this shade of gray"
> | _A Pleasant Shade of Gray_ - Fates Warning
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
--
Ryan Skadberg | "there's a space beside us
Ytsejam Moderator | and there's miles between us
[EMAIL PROTECTED] | and all around us
http://www.dreamt.org/ | grows this shade of gray"
| _A Pleasant Shade of Gray_ - Fates Warning
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
