Hello,

in the openssl.cnf file are three path settings wich can be
set relative. But relative to what?

My problem is, that I don't know and dont't find
an answer from which point this relative paths are starting

1.) The active directory?
2.) The directory where openssl (executable) resides
or
3.) The directory where openssl.cnf resides?
4.) Any other directory?

Actually I think that the $HOME is the path of the
active directory (from which I call openssl) Right?
Typically and with the default configuration the .rnd
file is generated in that _active_ directory.

The "dir" var for the toplevel directory of CA related
files (Where everything is kept) relative to the openssl
executable. Right?

And the "dir" var for the toplevel directory for the
certifcation requests. (Where everything is kept)
relative to the openssl executable. Right?

With this assumptions I have the following paths on
a _default_ debian (5.0.x) system right after installation
and without any further configurations.

$HOME = . # [active directorey, from which I call openssl]
dir = /etc/ssl//demoCA     # (CA related)
dir = /etc/ssl//demoCA     # (req related)
btw: This "demoCA" path doesn't exist after installation

And on Windows System with shining light OpenSSL dist.

$HOME = . # [active directorey, from which I call openssl]
dir = C:\OpenSSL\bin\demoCA     # (CA related)
dir = C:\OpenSSL\bin\demoCA     # (req related)

btw: but this path doesn't exist after installation in that bin
directory. There is a "demoCA" subdirectory at
"C:\OpenSSL\bin\PEM\demoCA"
But none of the configurations above would lead/point to
that directory. So it is a confusing "example"

Am  I right with my assumptions of the paths?

Thomas

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to