On Sun, Sep 05, 2004, pijush koley wrote:

> Hi!
> I want to setup a test CA using OpenSSL. So I configured openssl.cnf file according 
> to my environment. Then I executed following command
>  
> CA.pl -newca
>  
> This gave an error and it indicated that following line produced an error.
>  
> crlDistributionPoints = URI:ldap://<server IP>:<port>/CRLObjID=CRLPoint,o=domain
>  
> Than I changed this line to 
>  
> crlDistributionPoints = URI:http://<server IP>:<port>/TestCRL/
>  
> and this time whole setup worked fine. 
> Can anybody please tell me why crlDistributionPoints failed to take an URI started 
> with "ldap"?
>  

Yes its the embedded comma. If you need a comma then use the alternative
@section format mentioned in doc/openssl.txt

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to