Hello.
Sorry for my english.
I'm trying to create certificate signed of my CA.
I'm using openssl-1.0.0
I created my CA by command:
# openssl req -new -x509 -nodes -newkey gost2001 -pkeyopt paramset:XA
-keyout private/cacert.key -out private/cacert.pem -days 3650
Also I created request and private key
# openssl req -new -nodes -batch -subj
"/C=RU/ST=Russia/L=Moscow/O=HC/OU=IT Department/CN=test.team.hc.ru"
-newkey gost2001 -pkeyopt paramset:XA -keyout ssl.key/dns.key -out
ssl.csr/dns.pem
Then I tried to sing it by my CA
# openssl ca -policy policy_anything -batch -out ssl.crt/dns.crt
-infiles ssl.csr/dns.pem
And I've got this error:
34373201800:error:0D0C30C6:asn1 encoding routines:ASN1_item_sign:digest
and key type not supported:a_sign.c:245:
What's wrong? What should I do to make certificate signed of my CA?
Thanks
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
