Control: tags -1 +moreinfo Hello Jasen On Monday 19 August 2013 03:31:06 jasen@crackle.treshna.com wrote: > generating self-signed certs as described in > /usr/share/doc/apache2.2-common/README.Debian.gz > does not work: > > root@crackle:/etc/apache2/ssl# make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/example.com.cert > Could not create certificate. Openssl output was: > Error Loading extension section v3_req > 8780:error:2207507C:X509 V3 routines:v2i_GENERAL_NAME_ex:missing value:v3_alt.c:433: > 8780:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:v3_conf.c:93:name=subjectAltName, value=www.example.com It looks like you entered an invalid value for altName "www.example.com". This is the question: Please enter any additional names to use in the SSL certificate. It will become the 'subjectAltName' field of the generated SSL certificate. Multiple alternative names should be delimited with comma and no spaces. For a web server with multiple DNS names this could look like: DNS:www.example.com,DNS:images.example.com A more complex example including a hostname, a WebID, an email address, and an IPv4 address: DNS:example.com,URI:http://example.com/joe#me,email:me@example.com,IP:192.168.7.3 So please try with "DNS:www.example.com" rather than "www.example.com".
Attachment:
signature.asc
Description: This is a digitally signed message part.