Public bug reported:

I changed the CA directory to a different path in openssl.cnf:

[ CA_default ]

dir             = ./something_different

CA.pl -newca will not work succeed.

jan@x61s:~$ /usr/lib/ssl/misc/CA.pl -newca
CA certificate filename (or enter to create)

Making CA certificate ...
Generating a 2048 bit RSA private key
...................+++
............................................+++
writing new private key to './demoCA/private/cakey.pem'

The key gets written to ./demoCA instead of ./something_different. CA.pl
ignores setting in openssl.cnf until it changes its mind later in the
process:

[...]
Using configuration from /usr/lib/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:
I am unable to access the ./something_different/newcerts directory
./something_different/newcerts: No such file or directory
jan@x61s:~$

jan@x61s:~$ lsb_release -rd
Description:    Ubuntu 14.04.1 LTS
Release:        14.04
jan@x61s:~$ apt-cache policy openssl
openssl:
  Installiert:           1.0.1f-1ubuntu2.8
  Installationskandidat: 1.0.1f-1ubuntu2.8
  Versionstabelle:
 *** 1.0.1f-1ubuntu2.8 0
        500 http://de.archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 
Packages
        500 http://security.ubuntu.com/ubuntu/ trusty-security/main amd64 
Packages
        100 /var/lib/dpkg/status
     1.0.1f-1ubuntu2 0
        500 http://de.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1422011

Title:
  CA.pl does not use CA_default dir in openssl.cnf correctly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1422011/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to