Re: ca client - failed to update database, TXT_DB error number 2

[Bernhard Froehlich]

Frank Garber schrieb:

Hi Ted,

Thanks for the help, but...

Here's the line I added to the openssl.conf file:
[ CA_default ]


Here's the error message. Note the output about the unique subject?
--------------------------------------------------------------------
 Step 2: Sign the certificate
--------------------------------------------------------------------

Using configuration from C:\Progra~1\OpenSSL\openssl.conf
Loading 'screen' into random state - done
Enter pass phrase for C:\CA\private\CAkey.pem:
DEBUG[load_index]: unique_subject = "yes"
[...]

unique_subject = no

Now, what can this tell us? It tells us that openssl is quite sure you told it to use unique_subject=yes. Looks like openssl and you have some misunderstanding. ;)

Possible reasons:




Hope it helps.
Ted
;)

--
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26

- openssl is using another config file than you think it is. Not very probable since you surely crosschecked that you made your entry into C:\Progra~1\OpenSSL\openssl.conf - You made your entry in the [ CA_default ] section but openssl uses another section. Check the [ ca ] section of your config. - There are multiple "unique_subject" lines in the section with different settings, and openssl uses the wrong one. Check the section thoroughly. If this does not help, I'd need the complete config file, plus the content of the index file (called "index" by default)

smime.p7s
Description: S/MIME Cryptographic Signature