[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: pop certs



* Tom Allison (tallison@tacocat.net) [021218 03:59]:
> Dec 18 03:49:22  ipop3d[25946]: SSL error status: error:0906D06C:PEM 
> routines:PEM_read_bio:no start line
> Dec 18 03:49:22  ipop3d[25946]: SSL error status: error:140B3009:SSL 
> routines:SSL_CTX_use_RSAPrivateKey_file:missing asn1 eos
> 
> OK, I tried to create a new cert to solve my problem of having a 
> certificate with a mismatched name (mydomain.tld versus server.mydomain.tld)
> 
> I used this:
> 
> openssl req -newkey -out >ipop3d.pem -x509 -days 365 -outform PEM
> 
> And get the above.  Somethings not right with this because it never even 
> asked me for a server name either.

Strange.  I copy and paste exactly what you have above and it gives me a
CSR in ipop3d.pem and a private key in privkey.pem  (after the usual
dialog about what should go in the certificate).

vineet@pianoman ~ % openssl version
OpenSSL 0.9.6g 9 Aug 2002

I might have guessed that the '>' was extraneous (and I think it is, but
it seems to be harmless in this particular case).  It works here,
though.

good times,
Vineet
-- 
http://www.doorstop.net/
-- 
http://www.aclu.org/		It's all about Freedom.

Attachment: pgpKlN2ueXlCF.pgp
Description: PGP signature


Reply to: