Toon posts:

[RH8] [openssl-0.9.6b] error 18 at 0 depth lookup

Pagina: 1
Acties:

Verwijderd

Topicstarter
Ik probeer een eigen certificaat te maken met openssl.
Het is bijna gelukt denk ik, alleen het laatste stukje gaat fout.
Ik de instructies uitgevoerd zoals op http://www.modssl.org/docs/2.6/ssl_faq.html#ToC28 staat.

code:
1
2
3
4
5
6
7
8
9
10
openssl genrsa -des3 -out server.key 1024
openssl rsa -noout -text -in server.key
openssl req -new -key server.key -out server.csr
openssl req -noout -text -in server.csr

openssl genrsa -des3 -out ca.key 1024
openssl rsa -noout -text -in ca.key
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
openssl x509 -noout -text -in ca.crt
./sign.sh server.csr


maar bij ./signs.sh server.csr krijg ik een error:

code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# ./sign.sh server.csr
CA signing: server.csr -> server.crt:
Using configuration from ca.config
Enter PEM pass phrase:
Check that the request matches the signature
Signature ok
The Subjects Distinguished Name is as follows
organizationName      :PRINTABLE:'1ST'
commonName            :PRINTABLE:'213.73.152.48'
Certificate is to be certified until Jan  1 13:24:53 2004 GMT (365 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
CA verifying: server.crt <-> CA cert
server.crt: /O=1ST/CN=213.73.152.48
error 18 at 0 depth lookup:self signed certificate
/O=1ST/CN=213.73.152.48
error 7 at 0 depth lookup:certificate signature failure


Apache restarten gaat wel goed, alleen ik kan m'n site niet berijken met https://

code:
1
2
3
4
5
6
7
8
9
10
# /etc/rc.d/init.d/httpd restart
Stopping httpd: [  OK  ]
Starting httpd: Apache/2.0.40 mod_ssl/2.0.40 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.

Server 213.73.152.48:443 (RSA)
Enter pass phrase:
Ok: Pass Phrase Dialog successful.
[  OK  ]


Iemands die mij kan helpen? :'(

  • MikeN
  • Registratie: April 2001
  • Laatst online: 15-05 20:05
http://tirian.magd.ox.ac.uk/~nick/openssl-certs/errors.shtml

Staat iets over die error van je. Misschien heb je er wat aan.