[openssl-users] Errors on EndEntity cert generation

Viktor Dukhovni openssl-users at dukhovni.org
Fri Jul 27 17:14:12 UTC 2018



> On Jul 27, 2018, at 1:07 PM, Robert Moskowitz <rgm at htt-consult.com> wrote:
> 
> Error Loading extension section server_cert

> 3065065488:error:0E06D06C:configuration file routines:NCONF_get_string:no value:crypto/conf/conf_lib.c:275:group=CA_default name=email_in_dn
> 3065065488:error:0E06D06C:configuration file routines:NCONF_get_string:no value:crypto/conf/conf_lib.c:275:group=CA_default name=rand_serial
> 3065065488:error:2206D06C:X509 V3 routines:X509V3_parse_list:invalid null name:crypto/x509v3/v3_utl.c:360:
> 3065065488:error:22097069:X509 V3 routines:do_ext_nconf:invalid extension string:crypto/x509v3/v3_conf.c:93:name=crlDistributionPoints,section=
> 3065065488:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:crypto/x509v3/v3_conf.c:47:name=crlDistributionPoints, value=
> 
> Please help me with these latest errors.

Start with a less exotic ".cnf" file.  These are all configuration errors,
unrelated to ed25519.  Get a working RSA config file, and then switch
algorithms.

-- 
	Viktor.



More information about the openssl-users mailing list