Hello Martin Centner,

   Pls run the CA.pl in the path /usr/ssl/ because the path of the ca
   private key is the relative path of /usr/ssl.
   Or, u should modify the openssl.cnf file to change the private key
   path to the absoulte path.

Monday, March 18, 2002, 4:29:51 PM, you wrote:

MC> Hi all!

MC> I've got a problem parsing the CA's private key file generated by the 
MC> utility CA.pl. When CA.pl wants to read the private key of the CA 
MC> (/demoCA/private/cakey.pem) and I enter the _correct_ PEM pass phrase I 
MC> always get the following error:

#>> /usr/ssl/misc/CA.pl -sign
MC> Using configuration from /usr/ssl/openssl.cnf
MC> Enter PEM pass phrase:
MC> unable to load CA private key
MC> 21286:error:0D09D082:asn1 encoding 
MC> routines:d2i_RSAPrivateKey:parsing:d2i_r_pr.c:116:
MC> 21286:error:0D09B00D:asn1 encoding routines:d2i_PrivateKey:ASN1 
MC> lib:d2i_pr.c:89:
MC> 21286:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290:

MC> The same when i call

#>> openssl rsa -in demoCA/private/cakey.pem -check
MC> read RSA key
MC> Enter PEM pass phrase:
MC> unable to load key
MC> 21298:error:0D09D082:asn1 encoding 
MC> routines:d2i_RSAPrivateKey:parsing:d2i_r_pr.c:116:
MC> 21298:error:0D09B00D:asn1 encoding routines:d2i_PrivateKey:ASN1 
MC> lib:d2i_pr.c:89:
MC> 21298:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290:

MC> The private key file was created by CA.pl and I succseeded once to 
MC> create and sign a certificate whith the newly created CA. But the second 
MC> attempt to do so failed with the above error.

MC> Any ideas?

MC> cu
MC> _lot_



MC> ______________________________________________________________________
MC> OpenSSL Project                                 http://www.openssl.org
MC> User Support Mailing List                    [EMAIL PROTECTED]
MC> Automated List Manager                           [EMAIL PROTECTED]


-- 
Best regards,
Yours, Gary Chen
OICQ: 239696
ICQ UIN: 8444147
E-Mail: [EMAIL PROTECTED]
Homepage: http://www.ipsprite.com

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to