"Thomas J. Clancy" wrote:
> 
> Hey All,
> 
> I have this strange problem that occurs when I run the openssl.exe command
> line utility under Windows 2000.  It crashes when I do the following
> 
> openssl req -new -x509 -days 365 -key ca.key -out ca.crt
> 
> The error I get has to do with a configuration file.  Here is the error:
> 
> C:\Program Files\Apache Group\Apache\conf\test>openssl req -new -x509 -days
> 365
> -key ca.key -out ca.crt
> Using configuration from
> c:\development\openssl/c:\development\openssl/ssl/openssl.cnf
> Unable to load config info
> 
> First of all, when I built the openssl stuff, and followed what little
> instructions there were for Win32, I found no file called openssl.cnf.  And
> note the "Using configuration from" line.  It seems to be a completely
> malformed path.  The only thing I did with my environment was to add
> c:\development\openssl\bin to my path.  Anyway, when I run this I get an
> actual core dump (or whatever it's called in Windows...a memory access
> violation or something).  Any ideas?  I need to create certificates and such
> for testing and it seems that I need this utility to actually do it.
> 

The file called openssl.cnf is in the apps directory. The easiest thing
to do is to copy it somewhere convenient and then set the environment
variable OPENSSL_CONF to point to it. This is mentioned in the req
manual page.

There is a bug in OpenSSL 0.9.6 where the req utility will crash if it
can't find the configuration file.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to