<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Hi,</p>
<p>could you share commands that led to this error?</p>
<p>It looks to me referenced non existent section in config file like as param "-extensions" option.</p>
<p>Regards,<br />Libor</p>
<p><br /></p>
<p>On 2020-04-06 19:43, Richard Simard wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0"><!-- html ignored --> <!-- head ignored --><!-- meta ignored --> <!-- meta ignored -->
<div class="WordSection1">
<p class="MsoNormal">Hi!<!-- o ignored --></p>
<p class="MsoNormal"><span>Anybody can help me whit this error?<!-- o ignored --></span></p>
<p class="MsoNormal"><span><!-- o ignored --> </span></p>
<p class="MsoNormal"><span>Error Loading extension section server_cert<!-- o ignored --></span></p>
<p class="MsoNormal"><span>140091048477824:error:0E06D06C:configuration file routines:NCONF_get_string:no value:../crypto/conf/conf_lib.c:273:group=CA_default name=email_in_dn<!-- o ignored --></span></p>
<p class="MsoNormal"><span>140091048477824:error:0E06D06C:configuration file routines:NCONF_get_string:no value:../crypto/conf/conf_lib.c:273:group=CA_default name=rand_serial<!-- o ignored --></span></p>
<p class="MsoNormal"><span>140091048477824:error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first num too large:../crypto/asn1/a_object.c:73:<!-- o ignored --></span></p>
<p class="MsoNormal"><span>140091048477824:error:2208306E:X509 V3 routines:policy_section:invalid object identifier:../crypto/x509v3/v3_cpols.c:183:section:Cert_policy_server,name:policyIdentifier,value:GroupeSTIAssurance, GroupeSTIDevice<!-- o ignored --></span></p>
<p class="MsoNormal"><span>140091048477824:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:../crypto/x509v3/v3_conf.c:47:name=certificatePolicies, value=ia5org,1.3.6.1.4.1.51063,@Cert_policy_server<!-- o ignored --></span></p>
<p class="MsoNormal"><span><!-- o ignored --> </span></p>
<p class="MsoNormal"><span>[ openssl_init ]<!-- o ignored --></span></p>
<p class="MsoNormal"><span>oid_section = oids_section<!-- o ignored --></span></p>
<p class="MsoNormal"><span><!-- o ignored --> </span></p>
<p class="MsoNormal"><span>[ server_cert ]<!-- o ignored --></span></p>
<p class="MsoNormal"><span>basicConstraints = CA:FALSE<!-- o ignored --></span></p>
<p class="MsoNormal"><span>nsCertType = server<!-- o ignored --></span></p>
<p class="MsoNormal"><span>subjectKeyIdentifier = hash<!-- o ignored --></span></p>
<p class="MsoNormal"><span>authorityKeyIdentifier = keyid, issuer:always<!-- o ignored --></span></p>
<p class="MsoNormal"><span>keyUsage = critical, digitalSignature, keyEncipherment<!-- o ignored --></span></p>
<p class="MsoNormal"><span>extendedKeyUsage = serverAuth<!-- o ignored --></span></p>
<p class="MsoNormal"><span>certificatePolicies = ia5org, @Cert_policy_server<!-- o ignored --></span></p>
<p class="MsoNormal"><span>crlDistributionPoints = crl_section<!-- o ignored --></span></p>
<p class="MsoNormal"><span><!-- o ignored --> </span></p>
<p class="MsoNormal"><span>[ Cert_policy_server ]<!-- o ignored --></span></p>
<p class="MsoNormal"><span>policyIdentifier = GroupeSTIAssurance, GroupeSTIDevice<!-- o ignored --></span></p>
<p class="MsoNormal"><span>CPS.1 = http://cps.groupesti.com<!-- o ignored --></span></p>
<p class="MsoNormal"><span><!-- o ignored --> </span></p>
<p class="MsoNormal"><span>[ crl_section ]<!-- o ignored --></span></p>
<p class="MsoNormal"><span>fullname = URI:http://pki.groupesti.com/ca.crl<!-- o ignored --></span></p>
<p class="MsoNormal"><span>CRLissuer = dirName:issuer_section<!-- o ignored --></span></p>
<p class="MsoNormal"><span>reasons = keyCompromise, CACompromise<!-- o ignored --></span></p>
<p class="MsoNormal"><span>authorityKeyIdentifier = keyid:always<!-- o ignored --></span></p>
<p class="MsoNormal"><span><!-- o ignored --> </span></p>
<p class="MsoNormal">[ oids_section ]<!-- o ignored --></p>
<p class="MsoNormal">GroupeSTIAssurance = 1.3.6.1.4.1.51063.0.1<!-- o ignored --></p>
<p class="MsoNormal">GroupeSTIUser = 1.3.6.1.4.1.51063.0.1.0<!-- o ignored --></p>
<p class="MsoNormal">GroupeSTIDevice = 1.3.6.1.4.1.51063.0.1.1<!-- o ignored --></p>
<p class="MsoNormal"><!-- o ignored --> </p>
<p class="MsoNormal"><!-- o ignored --> </p>
</div>
</blockquote>
<p><br /></p>
</body></html>