Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Viktor Dukhovni
On Sat, Mar 01, 2014 at 02:31:51PM -0500, Jeffrey Walton wrote: > So I'm clear: there is no cleanup on the X509V3_CTX? I could not find > a X509V3_CTX_free() or similar function. Correct, no cleanup: void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subj, X509_REQ *req,

Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Jeffrey Walton
On Sat, Mar 1, 2014 at 7:29 AM, Dr. Stephen Henson wrote: > On Sat, Mar 01, 2014, Jeffrey Walton wrote: > >> I'm building a ca cert following .../demos/mkcert.c. The program is failing >> at: >> >> X509_EXTENSION* ex4 = >> X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); >

Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Dr. Stephen Henson
On Sat, Mar 01, 2014, Dr. Stephen Henson wrote: > On Sat, Mar 01, 2014, Jeffrey Walton wrote: > > > I'm building a ca cert following .../demos/mkcert.c. The program is failing > > at: > > > > X509_EXTENSION* ex4 = > > X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); > >

Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Dr. Stephen Henson
On Sat, Mar 01, 2014, Jeffrey Walton wrote: > I'm building a ca cert following .../demos/mkcert.c. The program is failing > at: > > X509_EXTENSION* ex4 = > X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); > err = ERR_get_error(); > ... > > $ openssl errstr 0x22073072 > e

Re: Error 0x22073072 when adding SKI to CA Cert

2014-02-28 Thread Jeffrey Walton
On Sat, Mar 1, 2014 at 1:14 AM, Viktor Dukhovni wrote: > On Sat, Mar 01, 2014 at 01:02:28AM -0500, Jeffrey Walton wrote: > >> X509_EXTENSION* ex4 = >> X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); >> err = ERR_get_error(); >> ... >> >> $ openssl errstr 0x22073072 >> erro

Re: Error 0x22073072 when adding SKI to CA Cert

2014-02-28 Thread Viktor Dukhovni
On Sat, Mar 01, 2014 at 01:02:28AM -0500, Jeffrey Walton wrote: > X509_EXTENSION* ex4 = > X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); > err = ERR_get_error(); > ... > > $ openssl errstr 0x22073072 > error:22073072:X509 V3 routines:S2I_SKEY_ID:no public key Too many N

Error 0x22073072 when adding SKI to CA Cert

2014-02-28 Thread Jeffrey Walton
I'm building a ca cert following .../demos/mkcert.c. The program is failing at: X509_EXTENSION* ex4 = X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); err = ERR_get_error(); ... $ openssl errstr 0x22073072 error:22073072:X509 V3 routines:S2I_SKEY_ID:no public key The publ