Hi,.. I can't seem to generate a valid certificate for my openSSL app. Whenever I try a certificate that is produced by me, using the openssl command line tool, or some other tool, I get the following error msgs from my app.: 12359:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:114: 12359:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:430: 12359:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:missing asn1 eos:ssl_rsa.c:707: However when I use a demo certificate that comes with your distro 0.9.5a this app does work. The only problem is that clients keep whining that the server doesn't use a certificate that is validated for the used IP number. Could anybody shed some light on this darkness ? regards, Peter Zijlstra programmer @ freeler.nl PS. I'm not on this mailing list, so would you all be so kind as to mail me any responces ? <**********************= working certificate =************************> -----BEGIN CERTIFICATE----- MIIC5TCCAk6gAwIBAgIBATANBgkqhkiG9w0BAQQFADBcMQswCQYDVQQGEwJBVTET MBEGA1UECBMKUXVlZW5zbGFuZDEaMBgGA1UEChMRQ3J5cHRTb2Z0IFB0eSBMdGQx HDAaBgNVBAMTE1Rlc3QgUENBICgxMDI0IGJpdCkwHhcNOTkxMjAyMjEzODUxWhcN MDUwNzEwMjEzODUxWjBbMQswCQYDVQQGEwJBVTETMBEGA1UECBMKUXVlZW5zbGFu ZDEaMBgGA1UEChMRQ3J5cHRTb2Z0IFB0eSBMdGQxGzAZBgNVBAMTElRlc3QgQ0Eg KDEwMjQgYml0KTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAo7ujy3XXpU/p yDJtOxkMJmGv3mdiVm7JrdoKLUgqjO2rBaeNuYMUiuI6oYU+tlD6agwRML0Pn2JF b90VdK/UXrmRr9djaEuH17EIKjte5RwOzndCndsjcCYyoeODMTyg7dqPIkDMmRNM 5R5xBTabD+Aji0wzQupYxBLuW5PLj7ECAwEAAaOBtzCBtDAdBgNVHQ4EFgQU1WWA U42mkhi3ecgey1dsJjU61+UwgYQGA1UdIwR9MHuAFE0RaEcrj18q1dw+G6nJbsTW R213oWCkXjBcMQswCQYDVQQGEwJBVTETMBEGA1UECBMKUXVlZW5zbGFuZDEaMBgG A1UEChMRQ3J5cHRTb2Z0IFB0eSBMdGQxHDAaBgNVBAMTE1Rlc3QgUENBICgxMDI0 IGJpdCmCAQAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQQFAAOBgQBb39BRphHL 6aRAQyymsvBvPSCiG9+kR0R1L23aTpNbhXp2BebyFjbEQYZc2kWGiKKcHkNECA35 3d4LoqUlVey8DFyafOIJd9hxdZfg+rxlHMxnL7uCJRmx9+xB411Jtsol9/wg1uCK sleGpgB4j8cG2SVCz7V2MNZNK+d5QCnR7A== -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQCju6PLddelT+nIMm07GQwmYa/eZ2JWbsmt2gotSCqM7asFp425 gxSK4jqhhT62UPpqDBEwvQ+fYkVv3RV0r9ReuZGv12NoS4fXsQgqO17lHA7Od0Kd 2yNwJjKh44MxPKDt2o8iQMyZE0zlHnEFNpsP4COLTDNC6ljEEu5bk8uPsQIDAQAB AoGAVZmpFZsDZfr0l2S9tLLwpjRWNOlKATQkno6q2WesT0eGLQufTciY+c8ypfU6 hyio8r5iUl/VhhdjhAtKx1mRpiotftHo/eYf8rtsrnprOnWG0bWjLjtIoMbcxGn2 J3bN6LJmbJMjDs0eJ3KnTu646F3nDUw2oGAwmpzKXA1KAP0CQQDRvQhxk2D3Pehs HvG665u2pB5ipYQngEFlZO7RHJZzJOZEWSLuuMqaF/7pTfA5jiBvWqCgJeCRRInL 21ru4dlPAkEAx9jj7BgKn5TYnMoBSSe0afjsV9oApVpN1Nacb1YDtCwy+scp3++s nFxlv98wxIlSdpwMUn+AUWfjiWR7Tu/G/wJBAJ/KjwZIrFVxewP0x2ILYsTRYLzz MS4PDsO7FB+I0i7DbBOifXS2oNSpd3I0CNMwrxFnUHzynpbOStVfN3ZL5w0CQQCa pwFahxBRhkJKsxhjoFJBX9yl75JoY4Wvm5Tbo9ih6UJaRx3kqfkN14L2BKYcsZgb KY9vmDOYy6iNfjDeWTfJAkBkfPUb8oTJ/nSP5zN6sqGxSY4krc4xLxpRmxoJ8HL2 XfhqXkTzbU13RX9JJ/NZ8vQN9Vm2NhxRGJocQkmcdVtJ -----END RSA PRIVATE KEY----- <**********************= generation attempt =************************> -----BEGIN CERTIFICATE----- MIICiTCCAfICAQAwDQYJKoZIhvcNAQEEBQAwgYwxCzAJBgNVBAYTAk5MMQswCQYD VQQIEwJGTDERMA8GA1UEBxMITGVseXN0YWQxEDAOBgNVBAoTB0ZyZWVsZXIxDjAM BgNVBAsTBUktTGFiMRgwFgYDVQQDEw9wb3AzLmZyZWVsZXIubmwxITAfBgkqhkiG 9w0BCQEWEnN1cHBvcnRAZnJlZWxlci5ubDAeFw0wMDA1MjIxMjQxMzVaFw0xMDA1 MjAxMjQxMzVaMIGMMQswCQYDVQQGEwJOTDELMAkGA1UECBMCRkwxETAPBgNVBAcT CExlbHlzdGFkMRAwDgYDVQQKEwdGcmVlbGVyMQ4wDAYDVQQLEwVJLUxhYjEYMBYG A1UEAxMPcG9wMy5mcmVlbGVyLm5sMSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGZy ZWVsZXIubmwwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMeU3EbtMCHGdFS/ M3YIWAUiZVffe7qeR3GBsaRBqbyqcrw8CeJbj0GROfZzvjdA3pntYWbaJrCJZ6pT EN8xN36hxbRLHkXQqlDVRCzGkW+/ZYtKVUw/cKjfPjuFVN+TjQFaU70mYHMirg1U Cv6jITllJ+VQbiVj4ywSZXiqTHkpAgMBAAEwDQYJKoZIhvcNAQEEBQADgYEAKWVY AY82DvPFPPRm97uwse9Q43qkyoYHbnn4/0tmo9RPa+bkKjS/ACQZHlmpjq2grj2e dkUMY6OKbsBnxPYJN5Z1t+sWeZ/aOo9eF4DSM8R2EAqYDMMyNkxTXTO09rx7K0UF 1xDsHFVxKwHll9/dHwg56cq7tfJRmFvcPK86q8U= -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,B745515C625A7F3A pekHqkdxk5dCJa4OwJYoEs4QKqaIEdKRdOq4e0EICM3QGrvh3WQ+rEk9VeMyHuU2 kSY69MrVuZKqbO95KgHv+xxnXRu4g/8N1gstN14gfkzPGjYpnnKfR4HKq4fCdImE VsOnBNZA7CxHg3B5kU3eFOOulxPzihc99/2IC7LzqYMSLov+qAp+WzoM6BUXEQJU UbmOS31VdJHcRuKxsl3q8Ux6ZR/GV84iU37Lvro+LYtCEFcCAvi83lAO76FDE0Xx W8scxmR1Kc4W3kFD9Kt7MBdU/iCUDkwL7t+7EM/fVZOc94KgykOo/m/roR4QreEo PJfEN/nh1Lwu84KyyUaMcavTWQvueN26n+n2vibl9H7Xx4llhYhpyrJl7IVYhuKg awIHShsym1NV4xs+H6GwrA362kAWaAKHZ8tBhMK+zyVYFYznR/CMPgNXxbf4ADEv GeGKrjuTgua22JmPnW1aacA1V3eoxC3d8DQ2Af92GHGFk0epJSbl6WSF84qu7UMY LPn1LhfzitBaI6JVqIthSIJ7G4QsLfW6R0cFDNiajxMevkx7RXCwi5p1O1B1ACmW gody8egQjNXsxBibhuJ4g29PpJh80Ah8zJfg17xzilWtNiPDHqvqgJvbL3nz9dY2 Y0dB+sEU4yC7KljAMIvtYa7YRYg75qTt45PiNfKvDq65JHhH5ykRr50/5MJ+S7jV r2uekWx03a3AU6U4FPm9VibYTyVYxIoZhYcxtx7HwO+1uRauWQy9gFLdbPZasNyR 6iT9TzNfxGGSTp9PNNLfnd88i+yBKvP1K5AbYTbXdvmyK2l9Mw+mmw== -----END RSA PRIVATE KEY----- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
