In message <[EMAIL PROTECTED]> on Mon, 18 Nov 
2002 13:00:33 -0600, "Tighe Schlottog" <[EMAIL PROTECTED]> said:

TSchlottog> bash-2.03# openssl ca -keyfile CA/CAkey.pem -extensions v3_ca -in
TSchlottog> CA/guardian.csr -out guardian.pem -outdir CA/certs
TSchlottog> Using configuration from /opt/openssl/openssl.cnf
TSchlottog> Enter PEM pass phrase:
TSchlottog> unable to load CA certificate
TSchlottog> 14437:error:0906D06C:PEM routines:PEM_read_bio:no start
TSchlottog> line:pem_lib.c:663:Expecting: CERTIFICATE
TSchlottog> bash-2.03#
TSchlottog> 
TSchlottog> Here is what the Certificate request looks like.

It says "unable to load CA certificate".  According to a default
openssl.cnf, it would be demoCA/cacert.pem.  If it's something else,
you need to say so with the -cert flag.  For example, if it is
CA/CAcert.pem:

openssl ca -keyfile CA/CAkey.pem -extensions v3_ca -in CA/guardian.csr -out 
guardian.pem -outdir CA/certs -cert CA/CAcert.pem

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
                    \      SWEDEN       \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to