输入代码:
OpenSSL> ca -in certreq.txt -out server.pem -config C:\openssl\openssl.cnf
报错信息:
Using configuration from C:\openssl\openssl.cnf
Loading 'screen' into random state - done
Enter pass phrase for ./demoCA/private/cakey.pem:
Check that the request matches the signature
Signature ok
The stateOrProvinceName field needed to be the same in the
CA certificate (beijing) and the request (beijing)
主要错误:
The stateOrProvinceName field needed to be the same in the
CA certificate (beijing) and the request (beijing)
原因:编码格式可能一致,虽然内容一样但是系统不识别
解决方法:
在C:\openssl\openssl.cnf中
countryName = match
表示严格校验国家名称
修改为
countryName = optional
表示可选
保存即可
如果还有相似的错误 都改成 optiona
如图:
成功截图:
参考资料:http://doc.okbase.net/fajar/archive/240528.html