On Wed, Sep 08, 2004, Joseph Bruni wrote: > The text database used by the openssl ca command can only allow one > certificate per subject. If you need to issue another certificate with > the exact same subject, revoke the previous certificate first, even if > the earlier certificate has expired. > >
The latest versions can issue multiple certificates with the same subject using the unique_subject option. Back to the OP query... > On Sep 7, 2004, at 3:03 PM, Areg Alimian wrote: > > >I’m using the OpenSSL Certificate Authority to generate X.509 v3 certs > >for TLS Client Authentication. After creating the CA Root cert and > >the private key, I generate a certificate request and then issue the > >command to get it signed by the CA. At this point I get the following > >error: > > > > > > > >780:error:0E06D06C:configuration file routines:NCONF_get_string:no > >value:conf_li > > > >b.c:329:group=CA_default name=unique_subject > > > > > > > >Could anyone please help me understand what this refers to. > > This is a bug in OpenSSL 0.9.7d, please try the latest 0.9.7-stable snapshot. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]