In message <[EMAIL PROTECTED]> on Mon, 18 Nov 2002 13:00:33 -0600, "Tighe Schlottog" <[EMAIL PROTECTED]> said:
TSchlottog> bash-2.03# openssl ca -keyfile CA/CAkey.pem -extensions v3_ca -in TSchlottog> CA/guardian.csr -out guardian.pem -outdir CA/certs TSchlottog> Using configuration from /opt/openssl/openssl.cnf TSchlottog> Enter PEM pass phrase: TSchlottog> unable to load CA certificate TSchlottog> 14437:error:0906D06C:PEM routines:PEM_read_bio:no start TSchlottog> line:pem_lib.c:663:Expecting: CERTIFICATE TSchlottog> bash-2.03# TSchlottog> TSchlottog> Here is what the Certificate request looks like. It says "unable to load CA certificate". According to a default openssl.cnf, it would be demoCA/cacert.pem. If it's something else, you need to say so with the -cert flag. For example, if it is CA/CAcert.pem: openssl ca -keyfile CA/CAkey.pem -extensions v3_ca -in CA/guardian.csr -out guardian.pem -outdir CA/certs -cert CA/CAcert.pem -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Redakteur@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 \ SWEDEN \ or +46-708-26 53 44 Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED] Member of the OpenSSL development team: http://www.openssl.org/ Unsolicited commercial email is subject to an archival fee of $400. See <http://www.stacken.kth.se/~levitte/mail/> for more info. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]