Re: strange error when trying to sign CSR

2005-08-18 Thread Gerd Schering
Richard Levitte wrote: Gerd Schering writes: Sorry for this question, of course we have rfc2459. *ahem* 3280 Cheers, Richard Yes, yes you're so right! -- -- -- Gerd Schering, Email: [EMAIL PROTECTED] -- -

Re: strange error when trying to sign CSR

2005-08-17 Thread Richard Levitte
Gerd Schering writes: Sorry for this question, of course we have rfc2459. *ahem* 3280 Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED]

Re: strange error when trying to sign CSR

2005-08-17 Thread Gerd Schering
Dr. Stephen Henson wrote: However back to the original query. The countryName in the two certificates is a different character type, in one it is PrintableString the other UTF8String. The 'ca' utility currently regards those as different. However in countryName only PrintableString is allowed

Re: strange error when trying to sign CSR

2005-08-17 Thread Gerd Schering
Gerd Schering wrote: B.t.w. is there an rfc or something else where the allowed string types are defined? Sorry for this question, of course we have rfc2459. Gerd -- -- -- Gerd Schering, Email: [EMAIL PROTECTED] -- -- TU Berlin, Zentralei

Re: strange error when trying to sign CSR

2005-08-17 Thread Gerd Schering
Dr. Stephen Henson wrote: However in countryName only PrintableString is allowed so if you have a certificate request with UTF8String in there it is broken anyway. So that's the main problem: an invalid certificate request. Thanks a lot for your help. B.t.w. is there an rfc or something else

Re: strange error when trying to sign CSR

2005-08-17 Thread Dr. Stephen Henson
On Wed, Aug 17, 2005, Gerd Schering wrote: > Hi, > > when trying to sign a CSR I get the following error: > > Check that the request matches the signature > Signature ok > The Subject's Distinguished Name is as follows > commonName:ASN.1 12:'xxx' > organizationName :ASN.1 12:'xx

Re: strange error when trying to sign CSR

2005-08-17 Thread Gerd Schering
Arsen Hayrapetyan wrote: What is in your config file [policy_match] section? [ policy_match ] countryName = supplied stateOrProvinceName = optional organizationName= supplied organizationalUnitName = optional commonName = supplied emailAddress=

Re: strange error when trying to sign CSR

2005-08-17 Thread Arsen Hayrapetyan
Gerd Schering wrote: > Hi, > > when trying to sign a CSR I get the following error: > > Check that the request matches the signature > Signature ok > The Subject's Distinguished Name is as follows > commonName:ASN.1 12:'xxx' > organizationName :ASN.1 12:'xxx' > organizationalUnitN

strange error when trying to sign CSR

2005-08-17 Thread Gerd Schering
Hi, when trying to sign a CSR I get the following error: Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName:ASN.1 12:'xxx' organizationName :ASN.1 12:'xxx' organizationalUnitName:ASN.1 12:'XXX' countryName