> From: owner-openssl-users On Behalf Of Marcus Schmitt > Sent: Monday, November 04, 2013 10:31
> I created the root-CA, Intermediate-CA and the servercert on my MAC > (10.8), afterwards I imported the file to my FreeBSD 9. > > When I try to create all the CA and certs on my FreeBSD directly I receive the > following error: > > === > openssl req -new -x509 -nodes -days 3650 -key private/cakey.pem -out > certs/cacert.pem -config openssl.cnf > > Error Loading request extension section v3_req > 11827:error:22071071:X509 V3 routines:string_to_hex:illegal hex > digit:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/x509v3/v3 _ > utl.c:441: > 11827:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in > extension:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/x509v > 3/v3_conf.c:93:name=subjectKeyIdentifier, value=hasH > === > > Could the issue be caused by the MAC ? > What might be the reason for this issue ? > Look carefully at the error message; you have subjectKeyIdentifier=hasH with an uppercase H when it should be lowercase. Did you "import" the openssl.cnf file and if so how? ftp, rcp, scp, smb, USB, etc? Or did you retype it? If you retype, some things including this must be exact. Mac OSX (and earlier) *filenames* are (at least usually) case-insensitive, but AFAIK no Macs ever ignored case for entering or changing text *in* a file. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
