On Thu, Apr 27, 2006, K Vu (sent by Nabble.com) wrote: > > Hello, > > I'm very new to openssl. I wanted to create a CSR PKCS#10 & tried the > following command: > > openssl req -config openssl.cnf -new -x509 -days 1001 -key private/cakey.pem > -out certs/ca.cert > > and I got the following error: > > 3809286:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not > seeded > > My question is, to generate a CSR PKCS#!0, is this the command to use? If it > is, what was the problem ? If the above is not the command to generate a CSR > PKCS#10, then what command(s) I need to use to generate it? > > Actually I need to write the code to generate CSR PKCS#10. But for now I > need to try it using openssl command line first.
The rest of that error message should point you to the FAQ. Don't use the -x509 command line switch to create a CSR. There is some sample CSR code in demos/x509/mkreq.c Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
