----- Original Message -----
From: "Grant Fletcher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: "Stefano Rivera" <[EMAIL PROTECTED]>
Sent: Friday, June 10, 2005 10:54 PM
Subject: [binc] SSL certs
>
Hi S
can you have a look at this for me please...
this is taken from Peter Stuge's guide to ssl certs..
I got a bit further but not much...
Ok, now the CA is set up.
To make a new cert e.g. for Binc, signed by the DIY CA, create the new key and
cert request, on the
machine where Binc will run:
cd /etc/opt/bincimap
(umask 077; openssl genrsa -out binc.key 1024)
openssl req -out binc.req -key binc.key -new
After this, copy binc.req to the CA machine, e.g. to
/usr/local/ssl/ca_diy/certs and then sign it with the DIY
"everything works great up to this point", After i type the command
openssl ca -in certs/binc.req -out certs/binc.cert
[EMAIL PROTECTED] bincimap]# openssl ca -in cert/binc.req -out cert/binc.cert
Using configuration from /usr/share/ssl/openssl.cnf
Error opening CA private key ./demoCA/private/cakey.pem
16366:error:02001002:system library:fopen:No such file or
directory:bss_file.c:259:fopen('./demoCA/private/cakey.pem','r')
16366:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:261:
unable to load CA private key
[EMAIL PROTECTED] bincimap]#
can you help!
G
