> From: owner-openssl-us...@openssl.org On Behalf Of Dr. Stephen Henson
> Sent: Saturday, 15 December, 2012 12:48

> On Fri, Dec 14, 2012, simon charles wrote:
> 
> > Which works but when using openssl ca routine - it is not 
> able to find / load the keys
> > 
> 
> I can't see why ca shouldn't work. I'd suggest trying a newer 
> version of
> OpenSSL downloaded from the website in case it's some weird 
> local version with
> a bug.
> 
One thought:
is OP using the same keypair for req -new (EE) and ca (CA)?

If so, that's rather odd practice; if you just want a selfsigned 
cert for a keypair, req -new -x509 is nearly as good and simpler.

If not, there could be some problem on the CA keypair specifically.

If rsa -check -engine works as it appears, that could narrow down 
the problem area.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to