Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't seem to create a certificate & configurable size of serial number #35

Closed
doio opened this issue May 15, 2018 · 3 comments
Closed

Comments

@doio
Copy link

doio commented May 15, 2018

Trying to create a certificate using on-hand CA and CSR but it gave me this error:

The following error occurred:
(7pki_evp[1]:CA Key)
error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

(pki_evp.cpp:515)

I have been using 2.0.0 and the database upgraded from version 1.4.0 (encrypted in 2.0.0), and I didn't know what went wrong.
Also when I am trying to change the password (leaving new passwords empty), this error also shows.

@chris2511
Copy link
Owner

Version 2.0.0-pre01 had issues when importing and using keys with empty database passwords.
The cited error is from 2.0.0 final importing a legacy database, so this should not be the issue.

Are you still able to open the database backup with XCA 1.4.0 (or 1.4.1)?
Does this database have a non-empty password?

You may try to change the database password with XCA 1.4.1
and then open it with XCA 2.0.1

Before trying anything, make a backup copy first.

@doio
Copy link
Author

doio commented May 16, 2018

I didn't recall using a pre-release version but anyway I have converted the database using 2.0.1 and now everything's fine.

One more thing though, I notice that in 2.0.0 pre01, "No more incrementing serials. Only unique random serial numbers. " Maybe that explains why I couldn't define serials anymore. But any chance one can choose to specify the length of serial numbers?

Thank you for this amazing software.

@PF4Public
Copy link
Contributor

@doio See this issue: #26

@chris2511 chris2511 changed the title Can't seem to create a certificate Can't seem to create a certificate & configurable size of serial number May 19, 2018
chris2511 added a commit that referenced this issue Jul 7, 2018
Make sure the first octet of the serial is not 0 and not
interpretable as negative.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants