So, I've been trying to generate a CSR from my gateway (UTM 9), here is the commands I've run from an SU prompt:
openssl genrsa -aes256 -out gateway.key 2048 <--- This works fine, generates the key file correctly.
openssl req -new -key gateway.key -out gateway.tw.csr =
------------------
Error Loading extension section v3_ca
1435629192:error:2206D06C:X509 V3 routines:X509V3_parse_list:invalid null name:v3_utl.c:326:
1435629192:error:22097069:X509 V3 routines:DO_EXT_NCONF:invalid extension string:v3_conf.c:139:name=subjectAltName,section=
1435629192:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:v3_conf.c:93:name=subjectAltName, value=
Ive also tried using the following config file, but same error:
---------------
#
# OpenSSL configuration file.
#
# Establish working directory.
dir = .
[ ca ]
default_ca = CA_default
[ CA_default ]
serial = $dir/serial
database = $dir/certindex.txt
new_certs_dir = $dir/certs
certificate = $dir/cacert.pem
private_key = $dir/private/cakey.pem
default_days = 365
default_md = md5
preserve = no
email_in_dn = no
nameopt = default_ca
certopt = default_ca
policy = policy_match
[ policy_match ]
countryName = CA
stateOrProvinceName = ON
organizationName = nydomain
organizationalUnitName = nydomain
commonName = gateway.nydomain.net
emailAddress = tool@nydomain.com
[ req ]
default_bits = 4096 # Size of keys
default_keyfile = key.pem # name of generated keys
default_md = md5 # message digest algorithm
string_mask = nombstr # permitted characters
distinguished_name = gateway.nydomain.net
req_extensions = v3_req
[ req_distinguished_name ]
# Variable name Prompt string
#------------------------- ----------------------------------
0.organizationName = nydomain
organizationalUnitName = IT
emailAddress = tool@nydomain.com
emailAddress_max = 40
localityName = Ottawa
stateOrProvinceName = ON
countryName = CA
countryName_min = 2
countryName_max = 2
commonName = gateway.nydomain.net
commonName_max = 64
# Default values for the above, for consistency and less typing.
# Variable name Value
#------------------------ ------------------------------
0.organizationName_default = nydomain
localityName_default = Ottawa
stateOrProvinceName_default = ON
countryName_default = CA
[ v3_ca ]
basicConstraints = CA:TRUE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
[ v3_req ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
---------------
Any suggestions or help is appreciated.
This thread was automatically locked due to age.