I'm just starting to configure Apache-SSL 
(Apache 1.36 + ssl_1.32) w/ openssl v0.92 + rsa patch.  Also I have
linked in PHP v3.07. Running linux v2.2.3, glibc v2.1.  Everything
compiled fine without any problems.  However when I try to set up
the keys/certs this is what I do/get:

openssl req -new -x509 -keyout CAkey.pem -out CAcert.pem -days 365 -config
/usr/local/ssl/lib/openssl.cnf
[ran fine]

openssl req -new -keyout newkey.pem -out newreq.pem -days 365 -config
/usr/local/ssl/lib/openssl.cnf
cat newreq.pem newkey.pem > new.pem
[ran fine]

openssl ca -policy policy_anything -out newcert.pem -infiles new.pem -config
/usr/local/ssl/lib/openssl.cnf
[dies]
I get:
Enter PEM pass phrase:
unable to load CA private key
31785:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
decrypt:evp_enc.c:275:
31785:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:403:

My CA private key is in the same place I have put in the openssl.cnf file.
I'm running
this as root, and the files are set 644.

Does anyone have any ideas or help with this?

Steve


----------------------------------------------
Steve Costaras      Unix Systems Administrator
[EMAIL PROTECTED]   Acxiom
Ph: (630) 719-0565  1501 Opus Place
FAX:(630) 719-0409  Downers Grove, IL.  60515
-
If you don't understand, read the RFC's.  If
you do, re-write them.  HTTP://3502543125/rfcs
----------------------------------------------
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to