cannot generate certificate request
hi,i'm on server2008 with exch 2007.when i useNew-ExchangeCertificate -GenerateRequest -Domainname autodiscover.myhost.mydomain.de, myhost.mydomain.de -SubjectName "C=DE,S=Bremen" -PrivateKeyExportable:$true -Path e:\request.txtthe file 'request.txt' looks like this:-----BEGIN NEW CERTIFICATE REQUEST-----MIIESjCCAzICAQAwfDEbMBkGA1UEAwwSbWVsbG9uLmprLXdvcmtzLmRlMRYwFAYD[... some more lines ....]wo+i00SyOm1n4Li/XrMG2KtIspRihvjsj2aGxIYNe4Chk8/D1XnCAZwfHeGToFgqtzh4TUjzfqd+/NvdXzHypujjM92K0BsoMGdqlv1UpiZKzd070AdGHB8K8yqE7SLcURoLWyPceNdRG4+eydiL60eHLRT59V+WAsZkAebzFnd3LpMGJSuQsg8vaduZLg==-----END NEW CERTIFICATE REQUEST-----notice the blank line before the 'end new certificate request'...i then copy the file to my linux box where i manage all certificates with openssl.there i useopenssl ca -out certificate.pem -config ./openssl.cnf -infiles request.txtwhich comes back with "Error reading certificate request in request.txt".However, removing the blank line i mentioned, the openssl-command can read the request, but complains about something else:Check that the request matches the signatureSignature okThe Subject's Distinguished Name is as followscommonName :ASN.1 12:'xxx'organizationalUnitName:ASN.1 12:'xxx'organizationName :ASN.1 12:'xxx'localityName :ASN.1 12:'Bremen'stateOrProvinceName :ASN.1 12:'Bremen'countryName :PRINTABLE:'DE'The stateOrProvinceName field needed to be the same in theCA certificate (Bremen) and the request (Bremen)The thing is, last year I had successfully created a certificate request on Server2003-64bit/Exchange2007 in the same way - but i had no problems then with additional blank lines or this ASN thingie. Had been straight generating the request, signing it, importing - done.Can anyone lead me to a solution on these two problems (blank line and ASN thing)?thanks in advanceJens Life's not rebootable
February 17th, 2009 6:21pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics