New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ERROR: adding extensions in section default #25

Closed
wingfire opened this Issue Mar 19, 2014 · 5 comments

Comments

Projects
None yet
5 participants
@wingfire

wingfire commented Mar 19, 2014

I get the following error by using --subject-alt-name

./easyrsa --subject-alt-name="DNS:test.example.com" build-server-full www.example.com nopass

Note: using Easy-RSA configuration from: ./vars
Generating a 4096 bit RSA private key
................................................................................................................................................................................................................................................................................................................................................................................++
........................................................................................................................................................................++
writing new private key to '/root/easy-rsa/easyrsa3/pki/private/www.example.com.key'
-----
Using configuration from /root/easy-rsa/easyrsa3/openssl-1.0.cnf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName            :PRINTABLE:'www.example.com'
ERROR: adding extensions in section default
140222199342760:error:22097082:X509 V3 routines:DO_EXT_NCONF:unknown extension name:v3_conf.c:124:
140222199342760:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:v3_conf.c:93:name=req_extensions, value=req_extra

Easy-RSA error:

signing failed (openssl output above may have more detail)

SAPikachu added a commit to SAPikachu/easy-rsa that referenced this issue Aug 15, 2014

Don't modify $EASYRSA_EXTRA_EXTS in gen_req()
$EASYRSA_EXTRA_EXTS shouldn't be modified when creating certificate request, otherwise subsequent call to sign_req() will fail. This caused build-full-{client,server} to fail when --subject-alt-name is supplied.

Fixes issue #25.

brendandburns added a commit to brendandburns/easy-rsa that referenced this issue Sep 19, 2014

Don't modify $EASYRSA_EXTRA_EXTS in gen_req()
$EASYRSA_EXTRA_EXTS shouldn't be modified when creating certificate request, otherwise subsequent call to sign_req() will fail. This caused build-full-{client,server} to fail when --subject-alt-name is supplied.

Fixes issue #25.

QueuingKoala added a commit that referenced this issue Dec 17, 2014

gen_req() no longer alters the global EXTRA_EXTS variable
When forming the OpenSSL config replacement text, gen_req() should not
alter the global variable as it is referred to again by sign_req() when
the wrapper-commands build-*-full are called.

This change localizes the replacement text to avoid competing over the
global variable.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
Based-On: patch submitted by Joe Hu <i@sapika.ch>
Fixes: Issue #25

@QueuingKoala QueuingKoala added the bug label Dec 17, 2014

@QueuingKoala

This comment has been minimized.

Show comment
Hide comment
@QueuingKoala

QueuingKoala Dec 17, 2014

Contributor

Fixed in bc58657

Contributor

QueuingKoala commented Dec 17, 2014

Fixed in bc58657

@antoineco

This comment has been minimized.

Show comment
Hide comment
@antoineco

antoineco Jul 24, 2015

Any plan to release a version which includes this fix?

antoineco commented Jul 24, 2015

Any plan to release a version which includes this fix?

@devurandom

This comment has been minimized.

Show comment
Hide comment
@devurandom

devurandom Aug 12, 2015

Same issue here when using 3.0.0_rc2.

devurandom commented Aug 12, 2015

Same issue here when using 3.0.0_rc2.

@ecrist

This comment has been minimized.

Show comment
Hide comment
@ecrist

ecrist Aug 13, 2015

Member

Hey folks,

I'm working on pushing is some bug fixes and aiming for a release of 3.0 before end of August. Sorry for the delay.

Eric Crist

On Aug 12, 2015, at 1:06 PM, Dennis Schridde notifications@github.com wrote:

Same issue here when using 3.0.0_rc2.


Reply to this email directly or view it on GitHub.

Member

ecrist commented Aug 13, 2015

Hey folks,

I'm working on pushing is some bug fixes and aiming for a release of 3.0 before end of August. Sorry for the delay.

Eric Crist

On Aug 12, 2015, at 1:06 PM, Dennis Schridde notifications@github.com wrote:

Same issue here when using 3.0.0_rc2.


Reply to this email directly or view it on GitHub.

@devurandom

This comment has been minimized.

Show comment
Hide comment
@devurandom

devurandom commented Aug 13, 2015

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment