Hello again, To make an own CA, try to sign a certificate. carnot:/etc/ssl/localcerts# openssl ca -in daltonOpenVPN.csr -out daltonOpenVPN.crt Using configuration from /usr/lib/ssl/openssl.cnf Error opening CA private key ./demoCA/private/cakey.pem ...
carnot:/etc/ssl/localcerts# cd .. carnot:/etc/ssl# ls openssl.cnf openssl.cnf It used /usr/lib/ssl/openssl.cnf rather than /etc/ssl/openssl.cnf ? carnot:/etc/ssl# grep demoCA openssl.cnf dir = ./demoCA # Where everything is kept carnot:/etc/ssl# ls demoCA ls: cannot access demoCA: No such file or directory Appears that /etc/ssl/openssl.cnf has never been adjusted to fit this squeeze. carnot:/etc/ssl# dpkg-reconfigure openssl carnot:/etc/ssl# No help there! carnot:/etc/ssl# man openssl.cnf No manual entry for openssl.cnf carnot:/etc/ssl$ man openssl | grep openssl.cnf carnot:/etc/ssl$ Googling "site:debian.org openssl.cnf" yields bug reports and complaints. Is openssl.cnf documented? Thanks, ... Peter E. -- 123456789 123456789 123456789 123456789 123456789 123456789 123456789 12 Tel +13606390202 Bcc: peasthope at shaw.ca http://carnot.yi.org/ "http://members.shaw.ca/peasthope/index.html#Itinerary " -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/171058040.39393.22488@cantor.invalid