Hi all, I am very new to openssl. I am trying to create a certificate using scep. I am using opnessl-0.9.8h for thsi implementation I am using a private key generated using openssl genrsa > cakey.pem command. for creating certificate I am using the following command. openssl req -config /usr/local/ssl/openssl.cnf -new -x509 -keyout private/cakey.pem -out cacert.pem -days 365
I am getting the following error on the scep server side 24818:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100: 24818:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:699: 24818:error:21071069:PKCS7 routines:PKCS7_signatureVerify:signature failure:pk7_doit.c:981: also if use the cakey.pem genrates using openssl req -config /usr/local/ssl/openssl.cnf -new -x509 -keyout private/cakey.pem -out cacert.pem -days 365 command I get following error 8848:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:150 So I have to use the private key generated using openssl genrsa > cakey.pem method. Please help me, how to resolve this error Thanks in advance. Regards, Abhishek ________________________________________ Public email at Nabble.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
