Andreas Schuldei wrote:
>
> I am not on this list, please cc: me.
>
> * Dr S N Henson ([EMAIL PROTECTED]) [001216 05:11]:
> > The problem is that the shell is attempting to expand $ENV with the
> > result show that you end up with ::CERT_COUNTRY in the config file.
>
> This came to my mind just before I fell asleep, too! (c:
>
> First thing in the morning (11.00) I corrected that and got new, bad output
>
> ###################################
>
> Country Name []:se
> Locality Name []:schuldei
> Organisation []:Frontyard
> Common Name []:195.84.105.112
> 4894:error:04075070:rsa routines:RSA_sign:digest too big for rsa key:rsa_sign.c:114:
> 4894:error:0D072006:asn1 encoding routines:ASN1_sign:bad get asn1 object
>call:a_sign.c:129:
>
> #################################
>
> This is my now fixed, picture book like local_openssl.conf:
>
> [ req ]
> default_bits = 128
The problem is the default_bits setting above. It is way too small: it
should be around 1024 bits.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
