X509v3 extensions:
>> X509v3 Basic Constraints:
>> CA:FALSE
>> X509v3 Key Usage:
>> Digital Signature, Non Repudiation, Key
>> En
9c:f3:d9:48:72:28:70:5d:06:d7:73:84:bc:f7:
5e:65:27:86:0d:e8:28:b4:dd:72:4d:8e:59:02:cc:39:0f:8d:
47:87
And this is the error:
[Mon Feb 21 20:15:37 2011] [error] mod_tsa:could
not load
Digital Signature, Non Repudiation, Key
>>Encipherment
>>Netscape Comment:
>>OpenSSL Generated Certificate
>> X509v3 Subject Key Identifier:
>>
:b4:dd:72:4d:8e:59:02:cc:39:0f:8d:
47:87
And this is the error:
[Mon Feb 21 20:15:37 2011] [error] mod_tsa:could not load
X.509 certificate: /usr/local/ssl/misc/demoCA/tss.pem
[Mon Feb 21 20:15:37 2011] [error]
mod_tsa:1
rated Certificate
>>>> X509v3 Subject Key Identifier:
>>>>
>>>> FA:0C:6E:6E:88:58:51:F4:DF:F1:E3:CC:DD:9D:71:8C:CD:95:68:17
>>>> X509v3 Authority Key Identifier:
>>>>
>>>> keyid:76:B9:CB:3B:5D:C
X509v3 Extended Key Usage: critical
>>> Time Stamping
>>> Signature Algorithm: sha1WithRSAEncryption
>>> 02:d1:fd:44:de:1e:9f:e0:29:66:35:8f:43:da:e6:b5:20:43:
>>> 52:90:b0:dc:8a:0f:09:92:9e:c2:6b:dc:14:ab:2c:9f
Time Stamping
> > Signature Algorithm: sha1WithRSAEncryption
> > 02:d1:fd:44:de:1e:9f:e0:29:66:35:8f:43:da:e6:b5:20:43:
> > 52:90:b0:dc:8a:0f:09:92:9e:c2:6b:dc:14:ab:2c:9f:1b:8e:
> > 02:76:9a:17:08:77:ca:26:06:13:25:9e:4a:e2:bf:bb:2b:4d:
5e:f9:0e:43:b8:de:82:b1:e0:
be:00:d2:57:9c:f3:d9:48:72:28:70:5d:06:d7:73:84:bc:f7:
5e:65:27:86:0d:e8:28:b4:dd:72:4d:8e:59:02:cc:39:0f:8d:
47:87
And this is the error:
[Mon Feb 21 20:15:37 2011] [error] mod_tsa:could not load X.509 certificate:
/usr/local/ssl/misc/demoCA
7:9c:f3:d9:48:72:28:70:5d:06:d7:73:84:bc:f7:
> 5e:65:27:86:0d:e8:28:b4:dd:72:4d:8e:59:02:cc:39:0f:8d:
> 47:87
>
> And this is the error:
> [Mon Feb 21 20:15:37 2011] [error] mod_tsa:could not load X.509 certificate:
> /usr/local/ssl/misc/demoCA/tss.pem
> [Mon Fe
:4d:8e:59:02:cc:39:0f:8d:
47:87
And this is the error:
[Mon Feb 21 20:15:37 2011] [error] mod_tsa:could not load X.509 certificate:
/usr/local/ssl/misc/demoCA/tss.pem
[Mon Feb 21 20:15:37 2011] [error]
mod_tsa:17262:error:2F083075:lib(47):func(131):reason(117):ts_rsp_sign.c:206:
[Mon Feb 21
Hello Yessica,
please post new certificate and exact error you're getting.
--
Kind Regards / S pozdravom
Jaroslav Imrich
http://www.jariq.sk
On Mon, Feb 21, 2011 at 4:41 PM, Yessica De Ascencao
wrote:
> hello!!!
> Thanks for the response!
>
> Yes I needed the extension to Time Stamping, how
hello!!!
Thanks for the response!
Yes I needed the extension to Time Stamping, however when I load the sample
certificate in the OpenTSA page, continues to show me the same error. I
created a certificate with the correct extension and likewise gives me error
.
I really do not know what may be hap
Hello Yessica,
this line in your logs tells you where the error occured:
[Thu Feb 17 19:23:09 2011] [error]
mod_tsa:1510:error:2F083075:lib(47):func(131):reason(117):ts_rsp_sign.c:206:
When you look into source code of openssl ts module -
http://cvs.openssl.org/fileview?f=openssl/crypto/ts/ts_rs
I tried with the certificate is opentsa page "tsa_ns.crt", still gives me
the same error. This is the certificate:
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=IE, ST=Co. Dublin, L=Dublin, O=O
Hi
TSA certificate:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8d:0b:98:ba:f3:e4:5d:4c
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=ve, ST=distrito capital, L=caracas, O=suscerte, OU=ac,
CN=acraiz/emailAddress=a...@dom.com
Hello Yessica,
error may be caused by incorrect extensions in TSA certificate. Could you
please post output of following command:
openssl x509 -in /root/tssCRT.pem -text
--
Kind Regards / S pozdravom
Jaroslav Imrich
http://www.jariq.sk
2011] [notice] mod_tsa:crypto device is set to: builtin
[Thu Feb 17 19:23:09 2011] [error] mod_tsa:could not load X.509 certificate:
/root/tssCRT.pem
[Thu Feb 17 19:23:09 2011] [error]
mod_tsa:1510:error:2F083075:lib(47):func(131):reason(117):ts_rsp_sign.c:206:
[Thu Feb 17 19:23:09 2011] [emerg
51:54 2011] [notice] mod_tsa:crypto device is set to: builtin
[Wed Feb 16 19:51:54 2011] [error] mod_tsa:could not load X.509 certificate:
/usr/local/ssl/misc/demoCA/tsscert.pem
[Wed Feb 16 19:51:54 2011] [error]
mod_tsa:1590:error:2F083075:lib(47):func(131):reason(117):ts_rsp_sign.c:206:
[Wed Feb
18 matches
Mail list logo