Hello,

I'm trying to enable TLS encryption. [0]

This command

% openssl ca -out foo-cert.pem -infiles foo-req.pem

raised "TXT_DB error number 2".

There is an explanation [1] of the problem, but I haven't tried it
yet. First, I want to be sure that my usage pattern is correct.

I used the same values for all commands: [0]

Country Name (2 letter code) [AU]:.
State or Province Name (full name) [Some-State]:.
Locality Name (eg, city) []:.
Organization Name (eg, company) [Internet Widgits Pty Ltd]:.
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:mail.example.com
Email Address []:ad...@example.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Should I change something in the above? Should I follow this [1] guide
instead?

openssl.cnf (changed lines):

[ policy_match ]
countryName = optional
stateOrProvinceName    = optional
organizationName       = optional
ogranizationalUnitName = optional
commonName             = supplied
emailAddress           = optional

[snip]

default_bits           = 4096

[0] http://www.postfix.org/TLS_README.html#quick-start
[1]
http://www.mad-hacking.net/documentation/linux/security/ssl-tls/signing-csr.xml


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to