[Bacula-users] generating certs for encryption -- bacula-fd crashes

hi all,

i've tried to scour the internet for help, but simply cannot seem to get PKI implemented correctly -- following the docs i have:

openssl genrsa -out master.key 2048
openssl req -days 3650 -new -key master.key -x509 -out master.crt

then for each machine i do a (sample):

openssl genrsa -out winx64.key 2048
openssl req -days 3650 -new -key winx64.key -x509 -out winx64.crt
cat winx64.key winx64.crt > winx64.pem

then, when i restart bacula-fd on a client i get:

15-Feb 10:45 baculaFileDaemon JobId 0: Error: crypto.c:462 Provided certificate does not include the required subjectKeyIdentifier extension.
15-Feb 10:45 baculaFileDaemon: Fatal Error at filed.c:418 because:Failed to load public certificate for File daemon "baculaFileDaemon" in /etc/bacula/bacula-fd.conf.
15-Feb 10:45 baculaFileDaemon JobId 0: Error: crypto.c:462 Provided certificate does not include the required subjectKeyIdentifier extension.
15-Feb 10:45 baculaFileDaemon: Fatal Error at filed.c:492 because: Failed to load master key certificate from file /etc/bacula/master.crt for File daemon "baculaFileDaemon" in /etc/bacula/bacula-fd.conf.
15-Feb 10:45 baculaFileDaemon: ERROR in filed.c:223 Please correct configuration file: /etc/bacula/bacula-fd.conf

my openssl.cnf file has subjectKeyIdentifier in the relevant sections.

can anyone give me a hand here?

many thanks

m

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users