[Help-gnutls] Re: CRQ signing error

[John Brooks]

After lots of tinkering, i've solved the problem. It seems to fail if gnutls_x509_crq_set_version isn't called - although the error is rather cryptic.

Thanks anyway :P

On Mon, Apr 14, 2008 at 7:08 PM, John Brooks <address@hidden> wrote:

I'm attempting to generate a certificate request with just a common name, and it seems that gnutls_x509_crq_sign2 is giving me GNUTLS_E_ASN1_VALUE_NOT_FOUND; i'm not sure what to do about that. As far as I can see, my code is consistent with the docs and examples. Any pointers on where this is incorrect?

        if ((re = gnutls_x509_crq_init(&req)) != 0)
        {
            gnutls_x509_privkey_deinit(key);
            return re;
        }

        if ((re = gnutls_x509_crq_set_dn_by_oid(req, GNUTLS_OID_X520_COMMON_NAME, 0, dn, strlen(dn))) != 0)
        {
            gnutls_x509_crq_deinit(req);
            gnutls_x509_privkey_deinit(key);
            return re;
        }

        if ((re = gnutls_x509_crq_set_key(req, key)) != 0)
        {
            gnutls_x509_crq_deinit(req);
            gnutls_x509_privkey_deinit(key);
            return re;
        }

// This is where the error occurs
        if ((re = gnutls_x509_crq_sign2(req, key, GNUTLS_DIG_SHA1, 0)) != 0)
        {
            gnutls_x509_crq_deinit(req);
            gnutls_x509_privkey_deinit(key);
            return re;
        }
       
        if ((re = gnutls_x509_crq_export(req, GNUTLS_X509_FMT_PEM, buf, bufsz)) != 0)
        {
            gnutls_x509_crq_deinit(req);
            gnutls_x509_privkey_deinit(key);
            return re;
        }

Thanks ;)
--
- John

-- 
- John