<div dir="ltr"><div>Yes it's only for testing so it doesn't matter.<br><br></div>But how do I do this? <br></div><div class="gmail_extra"><br><div class="gmail_quote">2017-11-30 19:54 GMT+01:00 Viktor Dukhovni <span dir="ltr"><<a href="mailto:openssl-users@dukhovni.org" target="_blank">openssl-users@dukhovni.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
> On Nov 30, 2017, at 2:46 AM, Pascal Withopf <<a href="mailto:pwithopf@adiscon.com">pwithopf@adiscon.com</a>> wrote:<br>
><br>
> Here is serverCA.pem as a file and as text<br>
<br>
</span>These are, I expect, test certs and keys, so posting the keys too<br>
is presumably not a problem...<br>
<br>
In any case, the problem is that the CA certificate is a v1<br>
certificate with no extensions.  It needs to be a v3 certificate<br>
with basicConstraints CA:true, and keyUsage befitting a CA.<br>
<br>
Certificate:<br>
    Data:<br>
        Version: 1 (0x0)<br>
        Serial Number:<br>
            92:fb:86:47:d7:eb:1f:c3<br>
    Signature Algorithm: sha1WithRSAEncryption<br>
        Issuer: C=XX, ST=XX, L=test, O=Testorganisation, CN=Root CA<br>
        Validity<br>
            Not Before: Nov 30 07:30:13 2017 GMT<br>
            Not After : Dec 30 07:30:13 2017 GMT<br>
        Subject: C=XX, ST=XX, L=test, O=Testorganisation, CN=Server CA<br>
        Subject Public Key Info:<br>
            Public Key Algorithm: rsaEncryption<br>
                Public-Key: (1024 bit)<br>
                Modulus:<br>
                    00:ba:f3:7b:2b:e3:e6:ed:e4:ec:<wbr>90:01:99:05:59:<br>
                    62:94:16:eb:f0:fd:07:8e:5d:13:<wbr>38:85:04:72:48:<br>
                    05:48:76:c2:0b:bb:63:79:c7:49:<wbr>4b:d2:33:5d:75:<br>
                    6f:f2:79:c7:55:db:23:4d:b6:4a:<wbr>89:82:b6:ff:aa:<br>
                    1d:d2:07:1b:4d:68:c8:f5:3d:87:<wbr>b6:76:05:bd:4a:<br>
                    0a:79:d8:27:e0:0d:a7:a7:7b:39:<wbr>13:85:7b:d3:b0:<br>
                    02:cb:0e:3d:27:d9:a6:8a:a0:65:<wbr>7c:a8:3a:72:73:<br>
                    a9:61:af:99:39:97:e5:f7:9c:8d:<wbr>3d:4a:bd:ac:af:<br>
                    4a:80:31:d7:46:c7:9a:3f:65<br>
                Exponent: 65537 (0x10001)<br>
    Signature Algorithm: sha1WithRSAEncryption<br>
         aa:d0:92:67:17:00:fe:33:7f:b9:<wbr>94:2c:63:6e:ce:cf:02:25:<br>
         77:d9:df:1e:89:3f:6b:fd:02:54:<wbr>73:04:36:54:c1:5a:a5:35:<br>
         27:4b:9d:55:55:f1:9f:d4:72:10:<wbr>9a:e0:3d:42:e2:8a:af:80:<br>
         aa:00:92:16:3d:16:49:9a:df:94:<wbr>13:63:df:50:99:50:87:1e:<br>
         a0:52:5e:ec:8b:23:4c:28:e8:f8:<wbr>f3:fc:10:fc:8d:72:1d:3f:<br>
         40:ac:89:42:18:d5:80:03:df:ad:<wbr>24:ff:74:c3:4e:e0:de:ac:<br>
         01:7a:df:b0:62:67:1b:85:84:bd:<wbr>c4:d4:89:79:41:21:46:d6:<br>
         59:06<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
--<br>
        Viktor.<br>
<br>
--<br>
openssl-users mailing list<br>
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
</div></div></blockquote></div><br></div>