OK, installed 0.9.7e and the openssl.cnf file to the right location. Was then able to create the certificate authority.
However, the next step, creating the SSL key for apache, met with the following error:
[EMAIL PROTECTED]:/etc/ssl# openssl req -new -config ./openssl.cnf -nodes -out
./apache-req.pem -keyout ./apache-key.pem
Using configuration from ./openssl.cnf
error on line 1074095624 of ./openssl.cnf
297:error:02001002:system library:fopen:No such file or
directory:bss_file.c:104:fopen('./openssl.cnf','rb')
297:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:106:
297:error:0E064002:configuration file routines:CONF_load:system
lib:conf_lib.c:91:
Ideas?
It can't find ./openssl.cnf?
I suggest you dump all these cookbook recipes and stick to something like:
CA.pl -newca
(this creates root CA)
CA.pl -newreq
(creates a certificate request)
CA.pl -sign
(signs request).
After running those the private key is in newreq.pem, the certificate in
newcert.pem and the CA certificate in demoCA/cacert.pem and you can copy them
to wherever is appropriate.
Steve.
OK, thanks. However, I'm clueless about how to execute the above commands. "CA.pl" is an unknown command to my system, and openssl req doesn't list it as an option.
What specifically am I missing about your suggestion?
- Dan O'Brien
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
