Collections:
Other Resources:
OpenSSL "ca" Error "stateOrProvinceName field needed to be the same"
Why I am getting the "The stateOrProvinceName field needed to be the same in the CA certificate (...) and the request (...)" error when running OpenSSL "ca" command?
✍: FYIcenter.com
If you are running the OpenSSL "ca" command installed
with the slproweb binary package for Windows,
you may get the "The stateOrProvinceName field needed to be the same in the
CA certificate (...) and the request (...)" error as shown below:
C:\Users\fyicenter>\local\OpenSSL-Win32\bin\openssl.exe OpenSSL> ca -in test.csr -keyfile my_ca.key -cert my_ca.crt Using configuration from C:\local\OpenSSL-Win32\bin\openssl.cfg Enter pass phrase for my_ca.key: Check that the request matches the signature Signature ok The stateOrProvinceName field needed to be the same in the CA certificate (TX) and the request (NY) error in ca
This error is caused by the "stateOrProvinceName=match" option in the [policy_match] section in the configuration file. This option limits you to sign a CSR that has the same stateOrProvinceName as you CA certificate.
Fixing this error is easy. Just add "-policy policy_anything" option in the "ca" command to by-pass this requirement.
⇒ OpenSSL "ca" - Sign CSR with CA Certificate
2016-09-13, 7451🔥, 0💬
Popular Posts:
How to view general information of a root CA certificate in Google Chrome 51? I want to know when is...
Certificate summary - Owner: Thawte SGC CA, Thawte Consulting (Pty) Ltd., ZA Issuer: Class 3 Public ...
Where to click to get more Web site information in IE? I want to know if the page I am reading is se...
How to view contents of a DSA public key file using OpenSSL "dsa" command? If you want to view conte...
Can I continue to use the Web site, even if it has the "Your connection is not secure" error? Normal...