(RADIATOR) xpclient_ext error

[Kenneth Cheung]

Hi,

I am having a bit of trouble creating an xp client certificate. I am a 
beginner in perl so I really have no idea of the following error messages. In 
the mkcertifcate.sh file, it trys to create a client xp certificate with 
openssl ca command. I am using openssl verion 0.9.6g and apparently the 
-extfile is not supported anymore. I ended up copying the extension to the 
openssl.cnf file. I try running the mkcertifcate.sh again without the 
-extfile command and it gave the following error. Is the extension absolutely 
necessary? How can I create a certificate suitable for an xp client?

<< Error from mkcertificate.sh >>
Error Loading extension section xpclient_ext
4062:error:0D06B089:asn1 encoding routines:ASN1_get_object:too 
long:asn1_lib.c:130:
4062:error:0D081065:asn1 encoding routines:d2i_ASN1_OBJECT:bad object 
header:a_object.c:217:
4062:error:2206706E:X509 V3 routines:V2I_EXT_KU:invalid object 
identifier:v3_extku.c:143:section:,name:1.3.6.1.5.5.7.3.2,value:
4062:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in 
extension:v3_conf.c:91:name=extendedKeyUsage, value=1.3.6.1.5.5.7.3.2
Error loading certificates from input
4063:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:663:Expecting: CERTIFICATE
4064:error:0D06B078:asn1 encoding routines:ASN1_get_object:header too 
long:asn1_lib.c:138:
unable to load certificate
4065:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:663:Expecting: TRUSTED CERTIFICATE

Thanks,

-- 
Kenneth Cheung
UNP Wireless Team
University of British Columbia

Office: (604) 822-0253
Cell: (604) 307-9922


______________________________________________________________________ 
Post your ad for free now! http://personals.yahoo.ca
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.