Yes, I'm ironing it out now. One problem seems to be the path statements under c:\program Files No matter how I format it, it's placing quotes "C:\Program Files\Openvpn\......" So I just reinstalled the package to the root of c, now I'm at c:\Openvpn\Easy-Rsa ,and things are going much smoother.
The other issue is definitely my lack of understanding of the openssl.cnf file. That too I'm starting to catch onto. Everyone's suggestions have helped tremendously. Thanks. */Jeff/* -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dr. Stephen Henson Sent: Friday, March 24, 2006 1:40 PM To: openssl-users@openssl.org Subject: Re: Question on error creating server key On Fri, Mar 24, 2006, Jeff Gross wrote: > Hi, > > I'm new to all this, thank God I found this forum.... > > When I build the server key using command : build-key-server server > > I keep getting the following error: > > Error opening CA private key "C:\Program Files\OpenVPN\easy-rsa\keys"/ca.key > 2648:error:0200107B:system library:fopen:Unknown error:.\crypto\bio\bss_file.c:278:fopen('"C:\Program Files\OpenVPN\easy-rsa\keys"/ca.key','rb') > 2648:error:20074002:BIO routines:FILE_CTRL:system lib:.\crypto\bio\bss_file.c:280: > unable to load CA private key > Could Not Find C:\Program Files\OpenVPN\easy-rsa\keys\*.old > > I've set the paths using these statements in the batch file: > > set KEY_DIR="C:\Program Files\OpenVPN\easy-rsa\keys" > set KEY_CONFIG="C:\Program Files\OpenVPN\easy-rsa\openssl.cnf" > > What's the deal with bss_file.c? Is this supposed to be on my windows2000 server box? > > Am I forgetting something? > I've been screwing around with this for a day and a half. > > Somebody please help! > Well it looks like you are using some other package (OpenVPN?) which has its own custom batch files which aren't working properly. That "bss_file.c" is just to help debug problems. It is indicating the OpenSSL source file that produced the error. The first line is a clue: > Error opening CA private key "C:\Program Files\OpenVPN\easy-rsa\keys"/ca.key does that file exist? Is it readable? However since these aren't standard OpenSSL scripts I can't say much more. You'd get better results asking in any public forum for the package that included those scripts. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
