req does not create SCEP requests. (SCEP is currently a draft, and I don't know if any work on it has occurred in openssl. If it has, it's probably been on the 0.9.9 branch in CVS, since that's where most new development is happening.)
-Kyle H On Thu, Sep 4, 2008 at 2:20 AM, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Hi all, > I am working with openssl-0.9.8h to generate SCEP certificates. I am getting > the following errors while the SCEP server is trying to verify the > signatures: > > 24293:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type > is not 01:rsa_pk1.c:100: > 24293:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check > failed:rsa_eay.c:699: > 24293:error:21071069:PKCS7 routines:PKCS7_signatureVerify:signature > failure:pk7_doit.c:981: > > I have generated my private key through openssl genrsa >cakey.pem and > certificate using openssl req -config /usr/local/ssl/openssl.cnf -new -x509 > -keyout private/cakey.pem -out cacert.pem -days 365. > Can anybody tell me how can I add padding to my certificate signing request. > > Please help me. > > Thanks in advance. > Regards, > Abhishek > -- > View this message in context: > http://www.nabble.com/rsa-routines%3ARSA_padding_check_PKCS1_type_1%3Ablock-type-is-not-01%3Arsa_pk1.c-tp19306475p19306475.html > Sent from the OpenSSL - User mailing list archive at Nabble.com. > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
