On Sat April 3 2010, Thomas Steinbach wrote: > Hello, > > in the openssl.cnf file are three path settings wich can be > set relative. But relative to what? > > My problem is, that I don't know and dont't find > an answer from which point this relative paths are starting > > 1.) The active directory? > 2.) The directory where openssl (executable) resides > or > 3.) The directory where openssl.cnf resides? > 4.) Any other directory? > > Actually I think that the $HOME is the path of the > active directory (from which I call openssl) Right? > Typically and with the default configuration the .rnd > file is generated in that _active_ directory. > > The "dir" var for the toplevel directory of CA related > files (Where everything is kept) relative to the openssl > executable. Right? > > And the "dir" var for the toplevel directory for the > certifcation requests. (Where everything is kept) > relative to the openssl executable. Right? > > With this assumptions I have the following paths on > a _default_ debian (5.0.x) system right after installation > and without any further configurations. > > $HOME = . # [active directorey, from which I call openssl] >
You better check that one - it may have been a typo here, but *nix systems __never__ specify the "current working directory" as the $HOME directory. *nix and nearly all other "single tree" file system OS have an entire sub-tree for the users home directories. Something like: $HOME=/home/steinbach would be more likely. Mike > dir = /etc/ssl//demoCA # (CA related) > dir = /etc/ssl//demoCA # (req related) > btw: This "demoCA" path doesn't exist after installation > > And on Windows System with shining light OpenSSL dist. > > $HOME = . # [active directorey, from which I call openssl] > dir = C:\OpenSSL\bin\demoCA # (CA related) > dir = C:\OpenSSL\bin\demoCA # (req related) > > btw: but this path doesn't exist after installation in that bin > directory. There is a "demoCA" subdirectory at > "C:\OpenSSL\bin\PEM\demoCA" > But none of the configurations above would lead/point to > that directory. So it is a confusing "example" > > Am I right with my assumptions of the paths? > > Thomas > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
