CSR trouble

[Darin Holloway]

Company certs were set to expire soon, so I hop on $Commercial_CA's website to 
renew.  We've changed from Stronghold 2 to Apache 
1.3.27+mod_ssl-2.8+openssl-0.9.6i in the last year (but the old cert/key pair 
has worked fine), so I couldn't renew.  I have to build a new csr and key so I 
do a:

foo# ./bin/openssl genrsa -out ./private/foo.net.key.pem 1024

foo# ./bin/openssl req -new -key ./private/foo.net.key.pem -out 
./requests/foo.net.csr

foo# more ./requests/foo.net.csr

copy everything (including the begin and end lines) and paste that into 
$Commercial_CA's form, it pukes complaining that the CSR is not self-signed.

Their help system only mentions that happening with an old Novell csr 
generator (most definitely not relevant).  I hop onto their tech chat, the rep 
 has yet to be able to find a solution.  I've tried again with a virgin 
install of openssl on a clone machine and with the other domain we are 
updating (also hosted on another machine), with no luck.

Any thoughts on what may be happening?

--
Darin Holloway
Systems Administrator and Web Developer
Bluegrass Network, LLC
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]