On Thu, Dec 28, 2006, Aaron Barnes wrote:

> I think we're making some progress with resolving this problem. I
> signed a new request with the switch you mentioned and loaded it onto
> the subordinate. I don't receive the old ASN1 error, which is good, but
> now I've received one I've never seen before, "A certificate's basic
> constraint extension has not been observed." Does this mean I may have
> something configured incorrectly in the openssl.cnf file?
>

Did you install a root CA onto that system too? If so that might be a problem
depending on how you created it.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org