It fails too. MUST be a passwd issue.

What output is expected from the command you gave?
(I'm sure it's not Unable to open private key)

Also - could you give me the openssl command to create a key (outside
openca) so I can see the output for myself?

Thanks

(sweating it ....)
Ron


----- Original Message -----
From: "Michael Bell" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, November 22, 2002 3:37 AM
Subject: Re: [Openca-Users] General Error. Error while storing role in
cert-object. rc 9.1


> Ron Gedye wrote:
>
> > I'm stumped.  While trying to issue a certificate for an unsigned,
approved
> > request I get the following error:
> > I thought at one time that this was a CA password problem but I don't
think
> > that's the case.
>
> > Using configuration from /usr/local/OpenCA/etc/openssl/openssl/User.conf
> > unable to load CA private key
> > 5749:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
> > decrypt:evp_enc.c:426:
> > 5749:error:0906A065:PEM routines:PEM_do_header:bad
decrypt:pem_lib.c:414:
> > unable to write 'random state'
>
> This is definitly a problem with your CA-key. Did you try to decrypt the
> key manually?
>
> openssl rsa -in /usr/local/OpenCA/var/crypto/keys/cakey.pem -text -noout
>
> Michael
> --
> -------------------------------------------------------------------
> Michael Bell                   Email (private): [EMAIL PROTECTED]
> Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
> Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
> Unter den Linden 6             Fax:  +49 (0)30-2093 2959
> 10099 Berlin
> Germany                                       http://www.openca.org
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users
>



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to