Hello Martin Centner, Pls run the CA.pl in the path /usr/ssl/ because the path of the ca private key is the relative path of /usr/ssl. Or, u should modify the openssl.cnf file to change the private key path to the absoulte path.
Monday, March 18, 2002, 4:29:51 PM, you wrote: MC> Hi all! MC> I've got a problem parsing the CA's private key file generated by the MC> utility CA.pl. When CA.pl wants to read the private key of the CA MC> (/demoCA/private/cakey.pem) and I enter the _correct_ PEM pass phrase I MC> always get the following error: #>> /usr/ssl/misc/CA.pl -sign MC> Using configuration from /usr/ssl/openssl.cnf MC> Enter PEM pass phrase: MC> unable to load CA private key MC> 21286:error:0D09D082:asn1 encoding MC> routines:d2i_RSAPrivateKey:parsing:d2i_r_pr.c:116: MC> 21286:error:0D09B00D:asn1 encoding routines:d2i_PrivateKey:ASN1 MC> lib:d2i_pr.c:89: MC> 21286:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290: MC> The same when i call #>> openssl rsa -in demoCA/private/cakey.pem -check MC> read RSA key MC> Enter PEM pass phrase: MC> unable to load key MC> 21298:error:0D09D082:asn1 encoding MC> routines:d2i_RSAPrivateKey:parsing:d2i_r_pr.c:116: MC> 21298:error:0D09B00D:asn1 encoding routines:d2i_PrivateKey:ASN1 MC> lib:d2i_pr.c:89: MC> 21298:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290: MC> The private key file was created by CA.pl and I succseeded once to MC> create and sign a certificate whith the newly created CA. But the second MC> attempt to do so failed with the above error. MC> Any ideas? MC> cu MC> _lot_ MC> ______________________________________________________________________ MC> OpenSSL Project http://www.openssl.org MC> User Support Mailing List [EMAIL PROTECTED] MC> Automated List Manager [EMAIL PROTECTED] -- Best regards, Yours, Gary Chen OICQ: 239696 ICQ UIN: 8444147 E-Mail: [EMAIL PROTECTED] Homepage: http://www.ipsprite.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]