I actually just found some information about the -config option. Using the
-config option I was able to create the csr file but it was not accepted by
the certificate authority Thawte. This is the error I am receiving:
The actual error given was:
We accept two broad forms of CSR. The preferable one is a BASE64
encoded PKCS#10 Certificate Signing Request. The other format is the
PEM Message format generated by early Domino, ICSS and WebSite Pro 1.x
web servers.
What do I need to to to avoid this error while trying to submit the request?
-----Original Message-----
From: Dr S N Henson [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 08, 2000 12:15 PM
To: [EMAIL PROTECTED]
Subject: Re: Creating a certificate request
"Kalligonis, Tim" wrote:
>
> I am using Apache 1.3 on Windows2000 Advanced server.
>
> Trying to do: Create a certificate request.
>
> Problem: When I try to create the *.csr file OpenSSL can not find the
> OpenSSL.cnf file because it is looking in the /usr/local/SSL directory
which
> does not exist on an NT/2000 machine.
> I am getting the following error:
>
> Using configuration from /usr/local/SSL/openssl.cnf
> Unable to load config info
> This is followed some time later by...
> unable to find 'distinguished_name' in config
> problems making Certificate Request
>
> I read through the FAQs and found a work around but it did not seem to
work
> for me. Honestly this is the first time I have ever used Apache and
OpenSSL
> so I am most likely doing something wrong.
> Is it possible to create a certificate request with OpenSSL/Apache on an
> NT/2000 machine?
> If so can any offer assistance or a URL on instructions on how to do this.
>
> Any assistance would be appreciated.
>
What do you mean "did not seem to work form me"? Have you set
OPENSSL_CONF and does it then say it is loading or trying to load from a
different location? Have you tried using the -config option and pointing
that directly at the configuration file?
There should be no problems creating certificates on any Win32 platform
(9X/NT/2000) when everything is properly set up.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
