On Saturday 26 May 2007 19:55, Marek Marcola wrote: > Hello, > > Some mail systems (eg Lotus Notes) requires proper extensions in > certificates. Certificates without this extensions are not > treated as candidates for signing/encryption. > With default configuration OpenSSL certificates > are created without extensions for signing and encryption. > To change this remove comment from line: > keyUsage = nonRepudiation, digitalSignature, keyEncipherment > from proper section of openssl.cnf file and generate > new certificate and check if this works.
Thanks Marek, I uncommented the line from the section [ usr_cert ] and also checked that the same line was uncommented under the section [ v3_req ]. However, I am getting the same error. :( This is so frustrating. Anything else I could check? -- Regards, Mick
pgptfliThZJR9.pgp
Description: PGP signature