There is a Perl wrapper to openssl for creating certs called CA.pl .
There is also a page that has a tutorial on creating certs with this
at:
http://www.post1.com/home/ngps/m2/howto.ca.html
You might try some of the generic certs provided just to get it
working.
Look to see where your code is trying to find the certs.
If it can't find it a ./ it means it is looking for it in the same
directory as the executeable. ("whereis openssl")
I used the openssl.conf and CA.pl in the same directory.
Thanks,
Mike
>>> [EMAIL PROTECTED] 6/10/2004 10:24:14 PM >>>
Hi,
I am trying to create to use certificate for the first
time.
I am using Redhat Linux 9.0 server with openssl
"openssl-0.9.7d" installed and compiled.
I have done following steps.
##########
[ root]#openssl genrsa -des3 -out server.key 2048
This propmted me for passowrd. O.K.
[ root]#openssl req -new -key server.key -out
server.csr
This prompted me for data. common name, etc. o.K.
[ root]#openssl genrsa -des3 -out ca.key 2048
This prompted me for password. O.K.
[ root]#openssl req -new -x509 -days 365 -key ca.key
-out ca.crt
This prompted me for data O.K.
everything worked fine till this stage.
When I want to create certificate with following
command :
[ root]# openssl ca
Using configuration from /usr/share/ssl/openssl.cnf
Error opening CA private key
./demoCA/private/cakey.pem
6198:error:02001002:system library:fopen:No such file
or directory:bss_file.c:25
9:fopen('./demoCA/private/cakey.pem','r')
6198:error:20074002:BIO routines:FILE_CTRL:system
lib:bss_file.c:261:
unable to load CA private key
File "/usr/share/ssl/openssl.cnf" is very much there
but values are still default. Not altered with what i
entered earlier.
Need help.
Do I have to change values in file
"/usr/share/ssl/openssl.cnf" manually?
and then use command "openssl ca"
Thanks for support.
__________________________________
Do you Yahoo!?
Friends. Fun. Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
