<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 26, 2018 at 6:15 PM, Felipe Gasper <span dir="ltr"><<a href="mailto:felipe@felipegasper.com" target="_blank">felipe@felipegasper.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>I see the same errors with 1.0.2n.<br>
<br>
Going by posts I see out-and-about about this error, there seem to be two possibilities:<br>
<br>
1) There’s an RSA padding scheme mismatch. Maybe your openssl.cnf has something nonstandard, e.g., raw padding rather than PKCS1?<br></div></blockquote><div><br></div><div>I paste the openssl.cnf file [1] <br></div><div><br></div><div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div></div><div><div>
2) The signature is simply incorrect. It’s been a while since I did this, but I *believe* you could check this by extracting the bytes for the first-nested SEQUENCE from the ASN.1 structure, get the signature for that blob against your private key, then compare that to the CSR’s stored signature. They should be the same.<br></div></div></blockquote><div><br></div><div>I'm not completely sure about how to check this, but I see that some data in the ASN.1 structure matches the modulus in the CSR's key modulus.<br></div><div></div><div><br></div><div><font size="1"><span style="font-family:monospace,monospace"> 0000 - 00 30 82 01 0a 02 82 01-01 <b>00 e2 6e 84 97 0e d5</b> .0.........n....<br> 0010 - <b>ea ad 18 4f 18 73 b3 f8</b>-<b>71 28 12 c2 5c 32 b8 07</b> ...O.s..q(..\2..<br> 0020 - <b>bc 01 8c ec 78 60 aa c0</b>-<b>01 18 5c 75 5d 01 76 8f</b> ....x`....\u].v.<br> 0030 - <b>b2 92 5c 47 23 f6 9d dc</b>-<b>f6 02 66 1f ca d3 cf a2</b> ..\G#.....f.....<br> 0040 - <b>01 44 58 f9 df f3 a5 8a</b>-<b>c9 a3 47 a7 80 1a 9f 62</b> .DX.......G....b<br> 0050 - <b>c4 a3 46 77 e3 96 6a 85</b>-<b>bf 06 ac 0a 51 ea 1a 9d</b> ..Fw..j.....Q...<br> 0060 - <b>03 2a 80 4c 63 6b 81 87</b>-<b>21 b5 56 4d a3 52 4d d9</b> .*.Lck..!.VM.RM.<br> 0070 - <b>b4 60 63 f3 14 5e a7 6e</b>-<b>9d f4 b7 5b 7d cb 10 9c</b> .`c..^.n...[}...<br> 0080 - <b>20 d1 be ed 7f 82 81 1c</b>-<b>f2 f0 94 ea a4 c9 6a 3b</b> .............j;<br> 0090 - <b>e7 1b cc 44 e7 0c 21 24</b>-<b>57 fa 4e 4d 6d c9 00 b1</b> ...D..!$W.NMm...<br> 00a0 - <b>79 17 e4 7e 76 96 bc 98</b>-<b>42 b8 ab ce a8 07 47 c0</b> y..~v...B.....G.<br> 00b0 - <b>bc 06 a7 b8 a7 36 07 2e</b>-<b>ca 80 d9 2c 3a 17 e7 a6</b> .....6.....,:...<br> 00c0 - <b>7c ec 53 1a 6a a1 37 a3</b>-<b>b6 59 00 6b c8 fe 7f f4</b> |.S.j.7..Y.k....<br> 00d0 - <b>2a 72 48 74 93 d6 81 b9</b>-<b>c0 3b 4f a9 9d 84 84 4d</b> *rHt.....;O....M<br> 00e0 - <b>60 76 97 90 0c f8 c7 46</b>-<b>26 94 90 84 c1 95 cb 00</b> `v.....F&.......<br> 00f0 - <b>41 8d 0b 35 41 2a a8 a9</b>-<b>ea 73 fd 08 81 92 46 03</b> A..5A*...s....F.<br> 0100 - <b>1a 1c c5 18 5b 87 dd 3c</b>-<b>a3 0d</b> 02 03 01 00 01 ....[..<.......</span></font></div><div><font size="1"><span style="font-family:monospace,monospace"></span></font><br></div><div><font size="1"><span style="font-family:monospace,monospace"> Modulus:<br> 00:e2:6e:84:97:0e:d5:ea:ad:18:4f:18:73:b3:f8:<br> 71:28:12:c2:5c:32:b8:07:bc:01:8c:ec:78:60:aa:<br> c0:01:18:5c:75:5d:01:76:8f:b2:92:5c:47:23:f6:<br> 9d:dc:f6:02:66:1f:ca:d3:cf:a2:01:44:58:f9:df:<br> f3:a5:8a:c9:a3:47:a7:80:1a:9f:62:c4:a3:46:77:<br> e3:96:6a:85:bf:06:ac:0a:51:ea:1a:9d:03:2a:80:<br> 4c:63:6b:81:87:21:b5:56:4d:a3:52:4d:d9:b4:60:<br> 63:f3:14:5e:a7:6e:9d:f4:b7:5b:7d:cb:10:9c:20:<br> d1:be:ed:7f:82:81:1c:f2:f0:94:ea:a4:c9:6a:3b:<br> e7:1b:cc:44:e7:0c:21:24:57:fa:4e:4d:6d:c9:00:<br> b1:79:17:e4:7e:76:96:bc:98:42:b8:ab:ce:a8:07:<br> 47:c0:bc:06:a7:b8:a7:36:07:2e:ca:80:d9:2c:3a:<br> 17:e7:a6:7c:ec:53:1a:6a:a1:37:a3:b6:59:00:6b:<br> c8:fe:7f:f4:2a:72:48:74:93:d6:81:b9:c0:3b:4f:<br> a9:9d:84:84:4d:60:76:97:90:0c:f8:c7:46:26:94:<br> 90:84:c1:95:cb:00:41:8d:0b:35:41:2a:a8:a9:ea:<br> 73:fd:08:81:92:46:03:1a:1c:c5:18:5b:87:dd:3c:<br> a3:0d<br></span></font></div><div></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>
<br>
Also, did you verify that the modulus and exponent as stored in the CSR match up against your private key file?<br></div></div></blockquote><div><br></div><div>They match:<br></div><div><font size="1"><span style="font-family:monospace,monospace"></span></font></div><div><br><font size="1"><span style="font-family:monospace,monospace"><font size="1"><span style="font-family:monospace,monospace">$ openssl
req -noout -text -in
CSR.csr
<br> ...<br> <b>Exponent: 65537 (0x10001)<br></b></span></font></span></font></div><div><br><font size="1"><span style="font-family:monospace,monospace"><font size="1"><span style="font-family:monospace,monospace"><b></b></span></font></span></font></div><div><font size="1"><span style="font-family:monospace,monospace">$ openssl rsa -noout -text -in privateKey.key <br>Private-Key: (2048 bit)<br>modulus:<br> ...<br><b>publicExponent: 65537 (0x10001)</b><br></span></font></div><div><font size="1"><span style="font-family:monospace,monospace"><br></span></font></div><div><font size="1"><span style="font-family:monospace,monospace">$ openssl req -noout -modulus -in CSR.csr <br>Modulus=E26E84970ED5EAAD184F1873B3F8712812C25C32B807BC018CEC7860AAC001185C755D01768FB2925C4723F69DDCF602661FCAD3C</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">FA2014458F9DFF3A58AC9A347A7801A9F62C4A34677E3966A85BF06AC0A51EA1A9D032A804C636B818721B5564DA3524DD9B46063F3145EA7</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">6E9DF4B75B7DCB109C20D1BEED7F82811CF2F094EAA4C96A3BE71BCC44E70C212457FA4E4D6DC900B17917E47E7696BC9842B8ABCEA80747C</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">0BC06A7B8A736072ECA80D92C3A17E7A67CEC531A6AA137A3B659006BC8FE7FF42A72487493D681B9C03B4FA99D84844D607697900CF8C746</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">26949084C195CB00418D0B35412AA8A9EA73FD08819246031A1CC5185B87DD3CA30D<br>$ openssl rsa -noout -modulus -in privateKey.key <br>Modulus=E26E84970ED5EAAD184F1873B3F8712812C25C32B807BC018CEC7860AAC001185C755D01768FB2925C4723F69DDCF602661FCAD3C</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">FA2014458F9DFF3A58AC9A347A7801A9F62C4A34677E3966A85BF06AC0A51EA1A9D032A804C636B818721B5564DA3524DD9B46063F3145EA7</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">6E9DF4B75B7DCB109C20D1BEED7F82811CF2F094EAA4C96A3BE71BCC44E70C212457FA4E4D6DC900B17917E47E7696BC9842B8ABCEA80747C</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">0BC06A7B8A736072ECA80D92C3A17E7A67CEC531A6AA137A3B659006BC8FE7FF42A72487493D681B9C03B4FA99D84844D607697900CF8C746</span></font></div><div><font size="1"><span style="font-family:monospace,monospace">26949084C195CB00418D0B35412AA8A9EA73FD08819246031A1CC5185B87DD3CA30D<br>$ openssl rsa -noout -modulus -in privateKey.key | openssl md5<br>(stdin)= <b>7eeda89fc0dcc018e8039af089d28609</b><br>$ openssl req -noout -modulus -in CSR.csr | openssl md5 <br>(stdin)= <b>7eeda89fc0dcc018e8039af089d28609</b></span></font><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>
<span class="gmail-m_-3864881670031112548gmail-HOEnZb"><font color="#888888"><br>
-F<br></font></span></div></div></blockquote><div><br></div><div>[1] <a href="https://paste.fedoraproject.org/paste/Eats8N1qHT3npyLWCxS%7Eaw" target="_blank">https://paste.fedoraproject.<wbr>org/paste/Eats8N1qHT3npyLWCxS~<wbr>aw</a><br></div><div><br> </div><div><br></div><div>Thank you</div><div><br></div><div>Jon<br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div><span class="gmail-m_-3864881670031112548gmail-HOEnZb"><font color="#888888">
</font></span><div class="gmail-m_-3864881670031112548gmail-HOEnZb"><div class="gmail-m_-3864881670031112548gmail-h5"><br>
> On Mar 26, 2018, at 11:55 AM, Jon Uriarte <<a href="mailto:juriarte@redhat.com" target="_blank">juriarte@redhat.com</a>> wrote:<br>
><br>
> Sure, here it is:<br>
><br>
> $ cat CSR.csr<br>
> -----BEGIN CERTIFICATE REQUEST-----<br>
> MIIChzCCAW8CAQAwQjELMAkGA1UEBh<wbr>MCWFgxFTATBgNVBAcMDERlZmF1bHQg<wbr>Q2l0<br>
> eTEcMBoGA1UECgwTRGVmYXVsdCBDb2<wbr>1wYW55IEx0ZDCCASIwDQYJKoZIhvcN<wbr>AQEB<br>
> BQADggEPADCCAQoCggEBAOJuhJcO1e<wbr>qtGE8Yc7P4cSgSwlwyuAe8AYzseGCq<wbr>wAEY<br>
> XHVdAXaPspJcRyP2ndz2AmYfytPPog<wbr>FEWPnf86WKyaNHp4Aan2LEo0Z345Zq<wbr>hb8G<br>
> rApR6hqdAyqATGNrgYchtVZNo1JN2b<wbr>RgY/MUXqdunfS3W33LEJwg0b7tf4KB<wbr>HPLw<br>
> lOqkyWo75xvMROcMISRX+k5NbckAsX<wbr>kX5H52lryYQrirzqgHR8C8Bqe4pzYH<wbr>LsqA<br>
> 2Sw6F+emfOxTGmqhN6O2WQBryP5/9C<wbr>pySHST1oG5wDtPqZ2EhE1gdpeQDPjH<wbr>RiaU<br>
> kITBlcsAQY0LNUEqqKnqc/0IgZJGAx<wbr>ocxRhbh908ow0CAwEAAaAAMA0GCSqG<wbr>SIb3<br>
> DQEBCwUAA4IBAQBxhvGIfkvJZjZqB/<wbr>B2ZEtVcODj/BhfmSjUlcQ74NdSZC5C<wbr>Uslc<br>
> y7ozJQiAXiRibaGOcPmeIGY6FNbLEC<wbr>WT/Fr2eciozvadDM+Klp92cqT3Zowu<wbr>SjX0<br>
> UV+1zfy2pu5OBtKfbGs0pBlsC6bLKy<wbr>VH2s4yoYluBEeGRuVv69HmZXOGE6H0<wbr>SvHj<br>
> LOV2puEkwtZcM/xq0uszDHfKVrbLp+<wbr>kT+m0OIgNRUDngkcpdp9P1W8tMLVY5<wbr>m8ar<br>
> h8ebVGxVF7ZtYihi6LPVaRcJgNyoaw<wbr>ntxhhiX/3rmzq3pavbcrxV3+j6rSLx<wbr>vw2z<br>
> eeHSCU6jTmFbKK/KPR9TUlJycelzKP<wbr>1zAZCV<br>
> -----END CERTIFICATE REQUEST-----<br>
><br>
><br>
> Jon<br>
><br>
> On Mon, Mar 26, 2018 at 5:49 PM, Felipe Gasper <<a href="mailto:felipe@felipegasper.com" target="_blank">felipe@felipegasper.com</a>> wrote:<br>
> But what is the actual PEM of the CSR?<br>
><br>
> It should look like:<br>
><br>
> -----BEGIN CERTIFICATE REQUEST-----<br>
> ...<br>
> -----END CERTIFICATE REQUEST-----<br>
><br>
> -FG<br>
><br>
> > On Mar 26, 2018, at 11:47 AM, Jon Uriarte <<a href="mailto:juriarte@redhat.com" target="_blank">juriarte@redhat.com</a>> wrote:<br>
> ><br>
> > Thanks for your replies.<br>
> ><br>
> > I'm creating the CSR with the default values.<br>
> ><br>
> > $ openssl req -noout -text -in CSR.csr<br>
> > Certificate Request:<br>
> > Data:<br>
> > Version: 0 (0x0)<br>
> > Subject: C=XX, L=Default City, O=Default Company Ltd<br>
> > Subject Public Key Info:<br>
> > Public Key Algorithm: rsaEncryption<br>
> > Public-Key: (2048 bit)<br>
> > Modulus:<br>
> > 00:e2:6e:84:97:0e:d5:ea:ad:<wbr>18:4f:18:73:b3:f8:<br>
> > 71:28:12:c2:5c:32:b8:07:bc:<wbr>01:8c:ec:78:60:aa:<br>
> > c0:01:18:5c:75:5d:01:76:8f:<wbr>b2:92:5c:47:23:f6:<br>
> > 9d:dc:f6:02:66:1f:ca:d3:cf:<wbr>a2:01:44:58:f9:df:<br>
> > f3:a5:8a:c9:a3:47:a7:80:1a:<wbr>9f:62:c4:a3:46:77:<br>
> > e3:96:6a:85:bf:06:ac:0a:51:<wbr>ea:1a:9d:03:2a:80:<br>
> > 4c:63:6b:81:87:21:b5:56:4d:<wbr>a3:52:4d:d9:b4:60:<br>
> > 63:f3:14:5e:a7:6e:9d:f4:b7:<wbr>5b:7d:cb:10:9c:20:<br>
> > d1:be:ed:7f:82:81:1c:f2:f0:<wbr>94:ea:a4:c9:6a:3b:<br>
> > e7:1b:cc:44:e7:0c:21:24:57:<wbr>fa:4e:4d:6d:c9:00:<br>
> > b1:79:17:e4:7e:76:96:bc:98:<wbr>42:b8:ab:ce:a8:07:<br>
> > 47:c0:bc:06:a7:b8:a7:36:07:<wbr>2e:ca:80:d9:2c:3a:<br>
> > 17:e7:a6:7c:ec:53:1a:6a:a1:<wbr>37:a3:b6:59:00:6b:<br>
> > c8:fe:7f:f4:2a:72:48:74:93:<wbr>d6:81:b9:c0:3b:4f:<br>
> > a9:9d:84:84:4d:60:76:97:90:<wbr>0c:f8:c7:46:26:94:<br>
> > 90:84:c1:95:cb:00:41:8d:0b:<wbr>35:41:2a:a8:a9:ea:<br>
> > 73:fd:08:81:92:46:03:1a:1c:<wbr>c5:18:5b:87:dd:3c:<br>
> > a3:0d<br>
> > Exponent: 65537 (0x10001)<br>
> > Attributes:<br>
> > a0:00<br>
> > Signature Algorithm: sha256WithRSAEncryption<br>
> > 71:86:f1:88:7e:4b:c9:66:36:6a:<wbr>07:f0:76:64:4b:55:70:e0:<br>
> > e3:fc:18:5f:99:28:d4:95:c4:3b:<wbr>e0:d7:52:64:2e:42:52:c9:<br>
> > 5c:cb:ba:33:25:08:80:5e:24:62:<wbr>6d:a1:8e:70:f9:9e:20:66:<br>
> > 3a:14:d6:cb:10:25:93:fc:5a:f6:<wbr>79:c8:a8:ce:f6:9d:0c:cf:<br>
> > 8a:96:9f:76:72:a4:f7:66:8c:2e:<wbr>4a:35:f4:51:5f:b5:cd:fc:<br>
> > b6:a6:ee:4e:06:d2:9f:6c:6b:34:<wbr>a4:19:6c:0b:a6:cb:2b:25:<br>
> > 47:da:ce:32:a1:89:6e:04:47:86:<wbr>46:e5:6f:eb:d1:e6:65:73:<br>
> > 86:13:a1:f4:4a:f1:e3:2c:e5:76:<wbr>a6:e1:24:c2:d6:5c:33:fc:<br>
> > 6a:d2:eb:33:0c:77:ca:56:b6:cb:<wbr>a7:e9:13:fa:6d:0e:22:03:<br>
> > 51:50:39:e0:91:ca:5d:a7:d3:f5:<wbr>5b:cb:4c:2d:56:39:9b:c6:<br>
> > ab:87:c7:9b:54:6c:55:17:b6:6d:<wbr>62:28:62:e8:b3:d5:69:17:<br>
> > 09:80:dc:a8:6b:09:ed:c6:18:62:<wbr>5f:fd:eb:9b:3a:b7:a5:ab:<br>
> > db:72:bc:55:df:e8:fa:ad:22:f1:<wbr>bf:0d:b3:79:e1:d2:09:4e:<br>
> > a3:4e:61:5b:28:af:ca:3d:1f:53:<wbr>52:52:72:71:e9:73:28:fd:<br>
> > 73:01:90:95<br>
> ><br>
> ><br>
> > $ openssl asn1parse -dump -in CSR.csr<br>
> > 0:d=0 hl=4 l= 647 cons: SEQUENCE<br>
> > 4:d=1 hl=4 l= 367 cons: SEQUENCE<br>
> > 8:d=2 hl=2 l= 1 prim: INTEGER :00<br>
> > 11:d=2 hl=2 l= 66 cons: SEQUENCE<br>
> > 13:d=3 hl=2 l= 11 cons: SET<br>
> > 15:d=4 hl=2 l= 9 cons: SEQUENCE<br>
> > 17:d=5 hl=2 l= 3 prim: OBJECT :countryName<br>
> > 22:d=5 hl=2 l= 2 prim: PRINTABLESTRING :XX<br>
> > 26:d=3 hl=2 l= 21 cons: SET<br>
> > 28:d=4 hl=2 l= 19 cons: SEQUENCE<br>
> > 30:d=5 hl=2 l= 3 prim: OBJECT :localityName<br>
> > 35:d=5 hl=2 l= 12 prim: UTF8STRING :Default City<br>
> > 49:d=3 hl=2 l= 28 cons: SET<br>
> > 51:d=4 hl=2 l= 26 cons: SEQUENCE<br>
> > 53:d=5 hl=2 l= 3 prim: OBJECT :organizationName<br>
> > 58:d=5 hl=2 l= 19 prim: UTF8STRING :Default Company Ltd<br>
> > 79:d=2 hl=4 l= 290 cons: SEQUENCE<br>
> > 83:d=3 hl=2 l= 13 cons: SEQUENCE<br>
> > 85:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption<br>
> > 96:d=4 hl=2 l= 0 prim: NULL<br>
> > 98:d=3 hl=4 l= 271 prim: BIT STRING<br>
> > 0000 - 00 30 82 01 0a 02 82 01-01 00 e2 6e 84 97 0e d5 .0.........n....<br>
> > 0010 - ea ad 18 4f 18 73 b3 f8-71 28 12 c2 5c 32 b8 07 ...O.s..q(..\2..<br>
> > 0020 - bc 01 8c ec 78 60 aa c0-01 18 5c 75 5d 01 76 8f ....x`....\u].v.<br>
> > 0030 - b2 92 5c 47 23 f6 9d dc-f6 02 66 1f ca d3 cf a2 ..\G#.....f.....<br>
> > 0040 - 01 44 58 f9 df f3 a5 8a-c9 a3 47 a7 80 1a 9f 62 .DX.......G....b<br>
> > 0050 - c4 a3 46 77 e3 96 6a 85-bf 06 ac 0a 51 ea 1a 9d ..Fw..j.....Q...<br>
> > 0060 - 03 2a 80 4c 63 6b 81 87-21 b5 56 4d a3 52 4d d9 .*.Lck..!.VM.RM.<br>
> > 0070 - b4 60 63 f3 14 5e a7 6e-9d f4 b7 5b 7d cb 10 9c .`c..^.n...[}...<br>
> > 0080 - 20 d1 be ed 7f 82 81 1c-f2 f0 94 ea a4 c9 6a 3b .............j;<br>
> > 0090 - e7 1b cc 44 e7 0c 21 24-57 fa 4e 4d 6d c9 00 b1 ...D..!$W.NMm...<br>
> > 00a0 - 79 17 e4 7e 76 96 bc 98-42 b8 ab ce a8 07 47 c0 y..~v...B.....G.<br>
> > 00b0 - bc 06 a7 b8 a7 36 07 2e-ca 80 d9 2c 3a 17 e7 a6 .....6.....,:...<br>
> > 00c0 - 7c ec 53 1a 6a a1 37 a3-b6 59 00 6b c8 fe 7f f4 |.S.j.7..Y.k....<br>
> > 00d0 - 2a 72 48 74 93 d6 81 b9-c0 3b 4f a9 9d 84 84 4d *rHt.....;O....M<br>
> > 00e0 - 60 76 97 90 0c f8 c7 46-26 94 90 84 c1 95 cb 00 `v.....F&.......<br>
> > 00f0 - 41 8d 0b 35 41 2a a8 a9-ea 73 fd 08 81 92 46 03 A..5A*...s....F.<br>
> > 0100 - 1a 1c c5 18 5b 87 dd 3c-a3 0d 02 03 01 00 01 ....[..<.......<br>
> > 373:d=2 hl=2 l= 0 cons: cont [ 0 ]<br>
> > 375:d=1 hl=2 l= 13 cons: SEQUENCE<br>
> > 377:d=2 hl=2 l= 9 prim: OBJECT :sha256WithRSAEncryption<br>
> > 388:d=2 hl=2 l= 0 prim: NULL<br>
> > 390:d=1 hl=4 l= 257 prim: BIT STRING<br>
> > 0000 - 00 71 86 f1 88 7e 4b c9-66 36 6a 07 f0 76 64 4b .q...~K.f6j..vdK<br>
> > 0010 - 55 70 e0 e3 fc 18 5f 99-28 d4 95 c4 3b e0 d7 52 Up...._.(...;..R<br>
> > 0020 - 64 2e 42 52 c9 5c cb ba-33 25 08 80 5e 24 62 6d d.BR.\..3%..^$bm<br>
> > 0030 - a1 8e 70 f9 9e 20 66 3a-14 d6 cb 10 25 93 fc 5a ..p.. f:....%..Z<br>
> > 0040 - f6 79 c8 a8 ce f6 9d 0c-cf 8a 96 9f 76 72 a4 f7 .y..........vr..<br>
> > 0050 - 66 8c 2e 4a 35 f4 51 5f-b5 cd fc b6 a6 ee 4e 06 f..J5.Q_......N.<br>
> > 0060 - d2 9f 6c 6b 34 a4 19 6c-0b a6 cb 2b 25 47 da ce ..lk4..l...+%G..<br>
> > 0070 - 32 a1 89 6e 04 47 86 46-e5 6f eb d1 e6 65 73 86 2..n.G.F.o...es.<br>
> > 0080 - 13 a1 f4 4a f1 e3 2c e5-76 a6 e1 24 c2 d6 5c 33 ...J..,.v..$..\3<br>
> > 0090 - fc 6a d2 eb 33 0c 77 ca-56 b6 cb a7 e9 13 fa 6d .j..3.w.V......m<br>
> > 00a0 - 0e 22 03 51 50 39 e0 91-ca 5d a7 d3 f5 5b cb 4c .".QP9...]...[.L<br>
> > 00b0 - 2d 56 39 9b c6 ab 87 c7-9b 54 6c 55 17 b6 6d 62 -V9......TlU..mb<br>
> > 00c0 - 28 62 e8 b3 d5 69 17 09-80 dc a8 6b 09 ed c6 18 (b...i.....k....<br>
> > 00d0 - 62 5f fd eb 9b 3a b7 a5-ab db 72 bc 55 df e8 fa b_...:....r.U...<br>
> > 00e0 - ad 22 f1 bf 0d b3 79 e1-d2 09 4e a3 4e 61 5b 28 ."....y...N.Na[(<br>
> > 00f0 - af ca 3d 1f 53 52 52 72-71 e9 73 28 fd 73 01 90 ..=.SRRrq.s(.s..<br>
> > 0100 - 95 .<br>
> ><br>
> ><br>
> > Jon<br>
> ><br>
> > On Mon, Mar 26, 2018 at 5:36 PM, Michael Wojcik <<a href="mailto:Michael.Wojcik@microfocus.com" target="_blank">Michael.Wojcik@microfocus.com</a><wbr>> wrote:<br>
> > I just tried the same commands on my system, using 1.0.2n, and didn't have any problems (as I'd expect).<br>
> ><br>
> > What's the output of openssl asn1parse -dump -in CSR.csr?<br>
> ><br>
> > --<br>
> > Michael Wojcik<br>
> > Distinguished Engineer, Micro Focus<br>
> ><br>
> ><br>
> > --<br>
> > openssl-users mailing list<br>
> > To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailma<wbr>n/listinfo/openssl-users</a><br>
> ><br>
> > --<br>
> > openssl-users mailing list<br>
> > To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailma<wbr>n/listinfo/openssl-users</a><br>
><br>
> --<br>
> openssl-users mailing list<br>
> To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailma<wbr>n/listinfo/openssl-users</a><br>
><br>
> --<br>
> openssl-users mailing list<br>
> To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailma<wbr>n/listinfo/openssl-users</a><br>
<br>
--<br>
openssl-users mailing list<br>
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailma<wbr>n/listinfo/openssl-users</a><br>
</div></div></div></div></blockquote></div><br></div></div>