and where is the ca certificate? cacert.pem or what ever the certificate =$dir/cacert.pem is pointing to in openssl.cnf
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Bindu Sent: Friday, July 30, 2004 5:15 PM To: [EMAIL PROTECTED] Subject: RE: Need help asap... cakey.pem is already there. --- "Bommareddy, Satish (Satish)" <[EMAIL PROTECTED]> wrote: > you will have to move the cakey.pem to > /opt/exampleca/private/ directory > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Bindu > Sent: Friday, July 30, 2004 5:05 PM > To: [EMAIL PROTECTED] > Subject: RE: Need help asap... > > > Hi, > > I moved the config file to > /opt/exampleca/private/openssl.cnf > > It still did nto work. > > [EMAIL PROTECTED] exampleca]# > OPENSSL_CONF=/opt/exampleca/private/openssl.cnf > [EMAIL PROTECTED] exampleca]# export OPENSSL_CONF > [EMAIL PROTECTED] exampleca]# openssl ca -in > testreq.pem > Using configuration from > /opt/exampleca/private/openssl.cnf > Enter pass phrase for > /opt/exampleca/private/cakey.pem: > Error opening CA certificate > 7728:error:02001002:system library:fopen:No such > file > or directory:bss_file.c:259:fopen('','r') > 7728:error:20074002:BIO routines:FILE_CTRL:system > lib:bss_file.c:261: > unable to load certificate > [EMAIL PROTECTED] exampleca]# > > I have the openssl-0.9.7a version running on Linux > now. I have also installed openssl-0.9.7d but still > when I run "version" command at the openssl prompt, > it > shows me that I am using the earlier version. > > Will changing the version to .7d do any help? and if > so how can I change it and get the latest version > running? > > Thanks so much for the help. > Bindu > --- "Bommareddy, Satish (Satish)" > <[EMAIL PROTECTED]> > wrote: > > > u can either update the openssl.cnf to look in > > /try/caex/cakey.pem, > > or you can move the cakey.pem from /try/caex/ to > > /opt/exampleca/private/ > > and try > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf > Of > > Bindu > > Sent: Friday, July 30, 2004 3:20 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Need help asap... > > > > > > I have the config file at > > usr/local/ssl/lib/openssl.cnf > > > > I used the environment variable OPENSSL_CONF to > find > > the config file. > > > > I have the cakey.pem at /try/caex/cakey.pem > > > > Do I need to change the location where I have > stored > > the config key?? > > > > Please guide. > > > > Thanks, > > Bindu > > --- "Bommareddy, Satish (Satish)" > > <[EMAIL PROTECTED]> > > wrote: > > > > > looks to me like it is not able to find > cakey.pem > > > is the path in openssl.cnf pointing to where the > > > cakey.pen resides? > > > that is one place to look at > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] > Behalf > > Of > > > Bindu > > > Sent: Friday, July 30, 2004 2:18 PM > > > To: [EMAIL PROTECTED] > > > Subject: Need help asap... > > > > > > > > > Hi all, > > > I am a graduate student and all new to Linux. I > > am > > > trying to set up a CA and issue/revoke > > certificates > > > using OPENSSL. I wanted to test using a test > > > certificate request and then issue and revoke. > But > > I > > > am kind of stuck at a point. Please help me. > > > > > > I successfully created the CA and submitted a > > > request. > > > But when I am trying to issue the certificate, I > > get > > > an error. > > > > > > [EMAIL PROTECTED] exampleca]# > > > OPENSSL_CONF=/usr/local/ssl/lib/openssl.cnf > > > [EMAIL PROTECTED] exampleca]# export > OPENSSL_CONF > > > [EMAIL PROTECTED] exampleca]# openssl ca -in > > > testreq.pem > > > Using configuration from > > > /usr/local/ssl/lib/openssl.cnf > > > Enter pass phrase for > > > /opt/exampleca/private/cakey.pem: > > > Error opening CA certificate > > > 7423:error:02001002:system library:fopen:No such > > > file > > > or directory:bss_file.c:259:fopen('','r') > > > 7423:error:20074002:BIO > routines:FILE_CTRL:system > > > lib:bss_file.c:261: > > > unable to load certificate > > > [EMAIL PROTECTED] exampleca]# > > > > > > > > > All the help is most appreciated. > > > > > > Thanks, > > > Bindu > > > > > > > > > ===== > > > Good things come in small packages. Make the > most > > of > > > them... > > > > > > > > > > > > > > > > __________________________________________________ > > > Do You Yahoo!? > > > Tired of spam? Yahoo! Mail has the best spam > > > protection around > > > http://mail.yahoo.com > > > > > > ______________________________________________________________________ > > > OpenSSL Project > > > http://www.openssl.org > > > User Support Mailing List > > > [EMAIL PROTECTED] > > > Automated List Manager > > > [EMAIL PROTECTED] > > > > > > ______________________________________________________________________ > > > OpenSSL Project > > > http://www.openssl.org > > > User Support Mailing List > > > [EMAIL PROTECTED] > > > Automated List Manager > > > [EMAIL PROTECTED] > > > > > > > > > ===== > > Good things come in small packages. Make the most > of > > them... > > > > > > > > > > > > > > > > __________________________________ > > Do you Yahoo!? > > New and Improved Yahoo! Mail - 100MB free storage! > === message truncated === ===== Good things come in small packages. Make the most of them... __________________________________ Do you Yahoo!? Yahoo! Mail is new and improved - Check it out! http://promotions.yahoo.com/new_mail ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
