David Murphy wrote:
>
> Steve - thanks a ton for this info.. However got a problem at 2 (generating
> DSA cert) . It says :-
>
> "using configuration from /usr/local/ssl/openssl.cnf" then
> "unable to load config info" even though I created the directory on Win NT
> and put the OpenSSL.cnf into it.
>
> Anyway it generates and displays the DSA private key but then says
>
> "unable to find 'distinguished name' in config"
> "problems making certificate request"
>
> Any ideas? this is on windows NT.
>
The second error is because of the first. I think I'll change that so it
bombs out after being unable to load the config rather than failing
later.
Anyway you can set the environment variable OPENSSL_CONF to point to
openssl.cnf, e.g. at a command shell try
set OPENSSL_CONF=C:\openssl.cnf
before the command.
Try playing around with that: it should first reflect your setting in
the startup message and hopefully no longer give the error that it can't
load it. Once it loads the file things should be a bit easier.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
