On Wed, Sep 08, 2004, Joseph Bruni wrote:

> The text database used by the openssl ca command can only allow one 
> certificate per subject. If you need to issue another certificate with 
> the exact same subject, revoke the previous certificate first, even if 
> the earlier certificate has expired.
> 
> 

The latest versions can issue multiple certificates with the same subject
using the unique_subject option.

Back to the OP query...

> On Sep 7, 2004, at 3:03 PM, Areg Alimian wrote:
> 
> >I’m using the OpenSSL Certificate Authority to generate X.509 v3 certs 
> >for TLS Client Authentication.  After creating the CA Root cert and 
> >the private key, I generate a certificate request and then issue the 
> >command to get it signed by the CA.  At this point I get the following 
> >error:
> >
> > 
> >
> >780:error:0E06D06C:configuration file routines:NCONF_get_string:no 
> >value:conf_li
> >
> >b.c:329:group=CA_default name=unique_subject
> >
> > 
> >
> >Could anyone please help me understand what this refers to.
> >

This is a bug in OpenSSL 0.9.7d, please try the latest 0.9.7-stable snapshot.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to