Hi,
What are the options you have put to your CA entity ?
Maybe there is some lacks here and the CRL cannot be generated.

As reading the French doc in page 33 the error was linked to a parameter
of the crl extension in the CA configuration (when you make a right
click on the CA in the main entity of your PKI).
first step was to remove the option "subjectKeyIdentifier" from the crl
extension list, wait about 30 min for propagation, take a new look
around the extensions of the CA to see if it has been recorded and try
to generate a new CRL.
If it doesn't solve the problem, the second parameter to check is the
"authorityKeyIdentifier", to modify it by removing the ":always" from
the string linked to this crl extension. Wait 30 min... etc.

I'm sure this problem had been reported to the list before and solved...
you should check the archives:
ok, found:
http://www.mail-archive.com/newpki-users@newp.../msg00237.html

;-)

Denis Dowling a écrit :

> Hi All,
>
> I am getting an error when trying to generate a CRL from the CA
> entity. When I click the button I get the following error:
>
> <------------------------------------------------>
> X509 V3 routines # 114
> no public key
> [v3_skey.c: 119]
> <------------------------------------------------>
> Error sent by internal crypto: #3026
> Giving up on previous error(s)
> [PKI EXT.cpp:341]
>
> It looks like I am missing an RSA key pair somewhere but cannot figure
> it out. Any ideas?
>
> Regards,
> Denis.
> _____________________________________________________________________
> NewPKI                                          http://www.newpki.org
> User Support Mailing List                     newpki-users@newp...
> Automated List Manager                           majordomo@newp...
>
>
_____________________________________________________________________
NewPKI                                          http://www.newpki.org
User Support Mailing List                     newpki-users@newp...
Automated List Manager                           majordomo@newp...