Yes, You have to
edit "[ CA_default ]" section in openssl.cnf file
OR
Move your certificates to the default path in "[
CA_default ]" section
OR
Specify the certifiace names in "openssl ca"
command using -in, -cert , -keyfile options
Refer this link to create and test your application
with SSL functionality http://www.visolve.com/openssl/
Thanks,
Mathan
----- Original Message -----
From: "ads nat" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 11, 2004 9:54 AM
Subject: Problem creating
certificate
> Hi,
> I am trying to create to use certificate for the first
> time.
> I am using Redhat Linux 9.0 server with openssl
> "openssl-0.9.7d" installed and compiled.
>
> I have done following steps.
> ##########
>
> [ root]#openssl genrsa -des3 -out server.key 2048
>
> This propmted me for passowrd. O.K.
> [ root]#openssl req -new -key server.key -out
> server.csr
>
> This prompted me for data. common name, etc. o.K.
>
> [ root]#openssl genrsa -des3 -out ca.key 2048
>
> This prompted me for password. O.K.
> [ root]#openssl req -new -x509 -days 365 -key ca.key
> -out ca.crt
>
> This prompted me for data O.K.
>
> everything worked fine till this stage.
>
> When I want to create certificate with following
> command :
>
> [ root]# openssl ca
> Using configuration from /usr/share/ssl/openssl.cnf
> Error opening CA private key
> ./demoCA/private/cakey.pem
> 6198:error:02001002:system library:fopen:No such file
> or directory:bss_file.c:25
> 9:fopen('./demoCA/private/cakey.pem','r')
> 6198:error:20074002:BIO routines:FILE_CTRL:system
> lib:bss_file.c:261:
> unable to load CA private key
>
> File "/usr/share/ssl/openssl.cnf" is very much there
> but values are still default. Not altered with what i
> entered earlier.
>
> Need help.
>
> Do I have to change values in file
> "/usr/share/ssl/openssl.cnf" manually?
> and then use command "openssl ca"
>
> Thanks for support.
>
> I am trying to create to use certificate for the first
> time.
> I am using Redhat Linux 9.0 server with openssl
> "openssl-0.9.7d" installed and compiled.
>
> I have done following steps.
> ##########
>
> [ root]#openssl genrsa -des3 -out server.key 2048
>
> This propmted me for passowrd. O.K.
> [ root]#openssl req -new -key server.key -out
> server.csr
>
> This prompted me for data. common name, etc. o.K.
>
> [ root]#openssl genrsa -des3 -out ca.key 2048
>
> This prompted me for password. O.K.
> [ root]#openssl req -new -x509 -days 365 -key ca.key
> -out ca.crt
>
> This prompted me for data O.K.
>
> everything worked fine till this stage.
>
> When I want to create certificate with following
> command :
>
> [ root]# openssl ca
> Using configuration from /usr/share/ssl/openssl.cnf
> Error opening CA private key
> ./demoCA/private/cakey.pem
> 6198:error:02001002:system library:fopen:No such file
> or directory:bss_file.c:25
> 9:fopen('./demoCA/private/cakey.pem','r')
> 6198:error:20074002:BIO routines:FILE_CTRL:system
> lib:bss_file.c:261:
> unable to load CA private key
>
> File "/usr/share/ssl/openssl.cnf" is very much there
> but values are still default. Not altered with what i
> entered earlier.
>
> Need help.
>
> Do I have to change values in file
> "/usr/share/ssl/openssl.cnf" manually?
> and then use command "openssl ca"
>
> Thanks for support.
>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.699 / Virus Database: 456 - Release Date: 6/4/2004
