On Sun, Sep 05, 2004, pijush koley wrote: > Hi! > I want to setup a test CA using OpenSSL. So I configured openssl.cnf file according > to my environment. Then I executed following command > > CA.pl -newca > > This gave an error and it indicated that following line produced an error. > > crlDistributionPoints = URI:ldap://<server IP>:<port>/CRLObjID=CRLPoint,o=domain > > Than I changed this line to > > crlDistributionPoints = URI:http://<server IP>:<port>/TestCRL/ > > and this time whole setup worked fine. > Can anybody please tell me why crlDistributionPoints failed to take an URI started > with "ldap"? >
Yes its the embedded comma. If you need a comma then use the alternative @section format mentioned in doc/openssl.txt Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]