Hi guys
I still have some pb in issuing a certificate for the RA.
Following you can find the error that I get
************************************************************************
[root@bilbo bin]# ./issue_certs.bin
Enter the OpenSSL intallation dir (/usr/local/ssl):
Enter the basedir for your CA [/usr/local/OpenCA ] : /usr/local/CAServer
Enter the config for your CA [ /usr/local/CAServer/stuff/openssl.cnf ] :
Enter the Secret Key's Size (default 1024) :
warning, not much extra random data, consider using the -rand option
Generating RSA private key, 1024 bit long modulus
........++++++
.++++++
e is 65537 (0x10001)
Generating request for certificate (01) ...
Using configuration from /usr/local/CAServer/stuff/openssl.cnf
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a
DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Email Address []:.
Common Name (eg, YOUR name) []:.
Organizational Unit Name (eg, section) []:.
Organization Name (eg, company) [OpenCA]:.
Country Name (2 letter code) [IT]:.
error, no objects specified in config file
problems making Certificate Request
Done.
Please specify the certificate Type (refer to the stuff/openssl.cnf
file for extensions to be used, defaults are user_cert, server_cert,
user_objsign_cert, server_objsign_cert ). Do not specify nothing for\n
default user certificate : server_cert
Signing the request :
Enter the Server Name : summer
Using configuration from /usr/local/CAServer/stuff/openssl.cnf
/usr/local/OpenCA/private/cakey.pem: No such file or directory
trying to load CA private key
22040:error:02001002:system library:fopen:system
lib:bss_file.c:245:fopen('/usr/
local/OpenCA/private/cakey.pem','r')
22040:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:247:
\nCopying issued certificate to certs/issued dir ... cp:
/usr/local/CAServer/cer
ts/new/01.pem: No such file or directory
Done.
(/usr/local/CAServer/certs/new/01.pem).
Importing certificate into DB ... sh:
/usr/local/CAServer/certs/new/01.pem: No s
uch file or directory
ERROR: Can't access /usr/local/CAServer/certs/new/01.pem
Done.
ADVICE:
=======
If you generated the certificates for the RAServer Web Server and the
Secure web server, now you can find the certificates in certs/new/ dir
or in certs/issued directory. The corresponding secret keys can be
found in private/ . Copy the to the corresponding server's configuration
specified dir (usually /ssl.crt and /ssl.key).
If you have, instead, generated the certificate for an RA Operator, i.e.
one person that should access the RAServer, use the bin/browserExport.bin
script to export certificate in .p12 (Netscape importable format).
--- END ---
**********************************************
Can you guys tell me what's wrong with that?
Thanks
Michel
--------------------------------------------------------------
Per problemi: [EMAIL PROTECTED] oppure (anche meglio)
[EMAIL PROTECTED] (messaggio con la sola parola HELP)
--------------------------------------------------------------
