Hi Richard, Thanks for your help. I hope I'm not leading you down the garden path. I've debugged a bit further and it seems that the rename in rotate_index is not occuring even though rename() is not returning an error. This is on Windows, and running the commands from a shell script under Cygwin. Other than an OS problem, or Cygwin peculiarity, I wonder if it's possible that the files being renamed haven't been closed and cause the rename to get dropped. The output of our script below highlights the problem with some "ls -lrta" sprinkled around. Notice that near the bottom in the two last "ls -lrta" outputs that index.txt.new exists after the "opensl ca" command has attempted to rename it. It's interesting though that in all other ls listings that these temporary files don't exist which I guess means that the renames do succeed sometimes. I've tried inserting delays and syncing the filesystem between openssl commands and before doing the ls's but it makes no difference. I haven't tried doing so in rotate_index().
Regards, Steven countryName_value = US # AUTODN stateOrProvinceName_value = . # AUTODN localityName_value = . # AUTODN 0.organizationName_value = . # AUTODN 1.organizationName_value = Root # AUTODN 0.organizationalUnitName_value = . # AUTODN 1.organizationalUnitName_value = . # AUTODN 2.organizationalUnitName_value = . # AUTODN 0.commonName_value = . # AUTODN 1.commonName_value = . # AUTODN 2.commonName_value = . # AUTODN You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) []:US State or Province Name []:. Locality Name []:. First Organization Name (max. 2) []:. Second Organization Name []:Root First Organizational Unit Name (max. 3) []:. Second Organizational Unit Name []:. Third Organizational Unit Name []:. First Common Name (max. 3) []:. Second Common Name []:. Third Common Name []:. Loading 'screen' into random state - done Generating a 1024 bit RSA private key .............................++++++ ...............................................................++++++ unable to write 'random state' writing new private key to 'newkey.pem' ----- New private key written to newkey.pem New certificate written to newcrt.pem total 5299 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 1574 Mar 19 17:42 test.testout -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 newcrt.pem drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . countryName_value = US # AUTODN stateOrProvinceName_value = . # AUTODN localityName_value = . # AUTODN 0.organizationName_value = . # AUTODN 1.organizationName_value = Root # AUTODN 0.organizationalUnitName_value = . # AUTODN 1.organizationalUnitName_value = . # AUTODN 2.organizationalUnitName_value = CA1 # AUTODN 0.commonName_value = . # AUTODN 1.commonName_value = . # AUTODN 2.commonName_value = . # AUTODN You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) []:US State or Province Name []:. Locality Name []:. First Organization Name (max. 2) []:. Second Organization Name []:Root First Organizational Unit Name (max. 3) []:. Second Organizational Unit Name []:. Third Organizational Unit Name []:CA1 First Common Name (max. 3) []:. Second Common Name []:. Third Common Name []:. Loading 'screen' into random state - done Generating a 1024 bit RSA private key ..............++++++ .............................++++++ unable to write 'random state' writing new private key to 'newkey.pem' ----- New private key written to newkey.pem New request written to newreq.pem total 5303 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 3953 Mar 19 17:42 test.testout -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 566 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . Using configuration from c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/issue.cnf.3772 Loading 'screen' into random state - done DEBUG: unique_subject undefined DEBUG: configured unique_subject is 1 Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' organizationName :PRINTABLE:'Root' organizationalUnitName:PRINTABLE:'CA1' Certificate is to be certified until Mar 19 06:42:27 2005 GMT (365 days) Write out database with 1 new entries DEBUG: writing "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3772.n ew" DEBUG: writing "index.txt.new" DEBUG: writing "index.txt.attr.new" DEBUG: rotate_serial(file="c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl /util/serial.3772", new_suffix="new", old_suffix="old" DEBUG: renaming "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3772" to "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3772.o ld" DEBUG: renaming "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3772.n ew" to "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3772" DEBUG: rotate_index(file="index.txt", new_suffix="new", old_suffix="old" DEBUG: renaming "index.txt" to "index.txt.old" DEBUG: renaming "index.txt.new" to "index.txt" DEBUG: renaming "index.txt.attr.new" to "index.txt.attr" Data Base Updated unable to write 'random state' New certificate written to newcrt.pem about to remove c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/issue.cnf.3772 total 5311 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 6573 Mar 19 17:42 test.testout -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 566 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr -rwxr-xr-x 1 redst01 None 48 Mar 19 17:42 index.txt -rwxr-xr-x 1 redst01 None 2906 Mar 19 17:42 newcrt.pem drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . countryName_value = US # AUTODN stateOrProvinceName_value = . # AUTODN localityName_value = . # AUTODN 0.organizationName_value = . # AUTODN 1.organizationName_value = Root # AUTODN 0.organizationalUnitName_value = . # AUTODN 1.organizationalUnitName_value = . # AUTODN 2.organizationalUnitName_value = CA1 # AUTODN 0.commonName_value = . # AUTODN 1.commonName_value = . # AUTODN 2.commonName_value = ee1 # AUTODN You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) []:US State or Province Name []:. Locality Name []:. First Organization Name (max. 2) []:. Second Organization Name []:Root First Organizational Unit Name (max. 3) []:. Second Organizational Unit Name []:. Third Organizational Unit Name []:CA1 First Common Name (max. 3) []:. Second Common Name []:. Third Common Name []:ee1 Loading 'screen' into random state - done Generating a 1024 bit RSA private key ...........................................++++++ ...........++++++ unable to write 'random state' writing new private key to 'newkey.pem' ----- New private key written to newkey.pem New request written to newreq.pem total 5315 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr -rwxr-xr-x 1 redst01 None 48 Mar 19 17:42 index.txt -rwxr-xr-x 1 redst01 None 2906 Mar 19 17:42 ca1_cert.pem -rwxr-xr-x 1 redst01 None 586 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem -rw-r--r-- 1 redst01 None 9310 Mar 19 17:42 test.testout drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . Using configuration from c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/issue.cnf.2368 Loading 'screen' into random state - done DEBUG: unique_subject undefined DEBUG: configured unique_subject is 1 DEBUG[load_index]: unique_subject = "yes" Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' organizationName :PRINTABLE:'Root' organizationalUnitName:PRINTABLE:'CA1' commonName :PRINTABLE:'ee1' Certificate is to be certified until Mar 19 06:42:31 2005 GMT (365 days) Write out database with 1 new entries DEBUG: writing "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.2368.n ew" DEBUG: writing "index.txt.new" DEBUG: writing "index.txt.attr.new" DEBUG: rotate_serial(file="c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl /util/serial.2368", new_suffix="new", old_suffix="old" DEBUG: renaming "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.2368" to "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.2368.o ld" DEBUG: renaming "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.2368.n ew" to "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.2368" DEBUG: rotate_index(file="index.txt", new_suffix="new", old_suffix="old" DEBUG: renaming "index.txt" to "index.txt.old" DEBUG: renaming "index.txt.new" to "index.txt" DEBUG: renaming "index.txt.attr" to "index.txt.attr.old" DEBUG: renaming "index.txt.attr.new" to "index.txt.attr" Data Base Updated unable to write 'random state' New certificate written to newcrt.pem about to remove c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/issue.cnf.2368 total 5322 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr.old -rwxr-xr-x 1 redst01 None 2906 Mar 19 17:42 ca1_cert.pem -rwxr-xr-x 1 redst01 None 586 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem -rw-r--r-- 1 redst01 None 12345 Mar 19 17:42 test.testout -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr -rwxr-xr-x 1 redst01 None 103 Mar 19 17:42 index.txt -rwxr-xr-x 1 redst01 None 2977 Mar 19 17:42 newcrt.pem drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . countryName_value = US # AUTODN stateOrProvinceName_value = . # AUTODN localityName_value = . # AUTODN 0.organizationName_value = . # AUTODN 1.organizationName_value = Root # AUTODN 0.organizationalUnitName_value = . # AUTODN 1.organizationalUnitName_value = . # AUTODN 2.organizationalUnitName_value = CA1 # AUTODN 0.commonName_value = . # AUTODN 1.commonName_value = . # AUTODN 2.commonName_value = ee2 # AUTODN You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) []:US State or Province Name []:. Locality Name []:. First Organization Name (max. 2) []:. Second Organization Name []:Root First Organizational Unit Name (max. 3) []:. Second Organizational Unit Name []:. Third Organizational Unit Name []:CA1 First Common Name (max. 3) []:. Second Common Name []:. Third Common Name []:ee2 Loading 'screen' into random state - done Generating a 1024 bit RSA private key ............++++++ .++++++ unable to write 'random state' writing new private key to 'newkey.pem' ----- New private key written to newkey.pem New request written to newreq.pem total 5325 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr.old -rwxr-xr-x 1 redst01 None 2906 Mar 19 17:42 ca1_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_ee1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr -rwxr-xr-x 1 redst01 None 103 Mar 19 17:42 index.txt -rwxr-xr-x 1 redst01 None 2977 Mar 19 17:42 ca1_ee1_cert.pem -rw-r--r-- 1 redst01 None 15253 Mar 19 17:42 test.testout -rwxr-xr-x 1 redst01 None 586 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . Using configuration from c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/issue.cnf.3856 Loading 'screen' into random state -reason: File exists done DEBUG: unique_subject undefined DEBUG: configured unique_subject is 1 DEBUG[load_index]: unique_subject = "yes" Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' organizationName :PRINTABLE:'Root' organizationalUnitName:PRINTABLE:'CA1' commonName :PRINTABLE:'ee2' Certificate is to be certified until Mar 19 06:42:34 2005 GMT (365 days) Write out database with 1 new entries DEBUG: writing "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3856.n ew" DEBUG: writing "index.txt.new" DEBUG: writing "index.txt.attr.new" DEBUG: rotate_serial(file="c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl /util/serial.3856", new_suffix="new", old_suffix="old" DEBUG: renaming "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3856" to "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3856.o ld" DEBUG: renaming "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3856.n ew" to "c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/serial.3856" DEBUG: rotate_index(file="index.txt", new_suffix="new", old_suffix="old" DEBUG: renaming "index.txt" to "index.txt.old" DEBUG: renaming "index.txt.new" to "index.txt" DEBUG: renaming "index.txt.attr" to "index.txt.attr.old" unable to rename index.txt.attr to index.txt.attr.old unable to write 'random state' about to remove c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/util/issue.cnf.3856 total 5334 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr.old -rwxr-xr-x 1 redst01 None 2906 Mar 19 17:42 ca1_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_ee1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr -rwxr-xr-x 1 redst01 None 103 Mar 19 17:42 index.txt -rwxr-xr-x 1 redst01 None 2977 Mar 19 17:42 ca1_ee1_cert.pem -rwxr-xr-x 1 redst01 None 586 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 newkey.pem -rw-r--r-- 1 redst01 None 18469 Mar 19 17:42 test.testout -rwxr-xr-x 1 redst01 None 158 Mar 19 17:42 index.txt.new -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr.new -rwxr-xr-x 1 redst01 None 2977 Mar 19 17:42 newcrt.pem drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . Certificate(s) revoked. total 5335 drwxr-xr-x+ 3 redst01 None 0 Mar 19 17:42 .. -rw-r--r-- 1 redst01 None 12921 Mar 19 17:42 test1.d -rwxr-xr-x 1 redst01 None 86016 Mar 19 17:42 vc60.pdb -rwxr-xr-x 1 redst01 None 85123 Mar 19 17:42 test1.obj -rwxr-xr-x 1 redst01 None 3023872 Mar 19 17:42 test1.pdb -rwxr-xr-x 1 redst01 None 1079480 Mar 19 17:42 test1.ilk -rwxr-xr-x 1 redst01 None 1126492 Mar 19 17:42 test1.exe -rw-r--r-- 1 redst01 None 3332 Mar 19 17:42 test.sh -rw-r--r-- 1 redst01 None 45 Mar 19 17:42 randstate -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 root_key.pem -rwxr-xr-x 1 redst01 None 749 Mar 19 17:42 root_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr.old -rwxr-xr-x 1 redst01 None 2906 Mar 19 17:42 ca1_cert.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_ee1_key.pem -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr -rwxr-xr-x 1 redst01 None 2977 Mar 19 17:42 ca1_ee1_cert.pem -rwxr-xr-x 1 redst01 None 586 Mar 19 17:42 newreq.pem -rwxr-xr-x 1 redst01 None 887 Mar 19 17:42 ca1_ee2_key.pem -rwxr-xr-x 1 redst01 None 158 Mar 19 17:42 index.txt.new -rwxr-xr-x 1 redst01 None 21 Mar 19 17:42 index.txt.attr.new -rwxr-xr-x 1 redst01 None 2977 Mar 19 17:42 ca1_ee2_cert.pem -rw-r--r-- 1 redst01 None 20192 Mar 19 17:42 test.testout -rw-r--r-- 1 redst01 None 103 Mar 19 17:42 index.txt drwxr-xr-x+ 2 redst01 None 0 Mar 19 17:42 . c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/bin/openssl ocsp -issuer ca1_cert.pem -cert ca1_ee1_cert.pem -reqout ca1_ee1_req_unsigned.der -no_nonce c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/bin/openssl ocsp -issuer ca1_cert.pem -cert ca1_ee1_cert.pem -reqout ca1_ee1_req_signed.der -signer ca1_ee1_cert.pem -signkey ca1_ee1_key.pem -sign_other ca1_cert.pem -no_nonce Starting OCSP responder.... c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/bin/openssl ocsp -index index.txt -text -resp_no_certs -port 19916 -CA ca1_cert.pem -rsigner ca1_cert.pem -rkey ca1_key.pem -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Levitte - VMS Whacker Sent: Friday, 19 March 2004 6:57 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: New CA index subfiles (.attr, .attr.new, .attr.old, .new) In message <[EMAIL PROTECTED]> on Fri, 19 Mar 2004 14:31:55 +1100, "Steven Reddie" <[EMAIL PROTECTED]> said: smr> Hi Richard, smr> smr> Ah, that's the problem then. The .new file is remaining and the smr> contents aren't being rolled into the index.txt file. All I've smr> done is upgrade from OpenSSL 0.9.7c to OpenSSL 0.9.7d, however we smr> have some patches in our ca.c file to support Delta CRLs which I smr> don't think should matter in this case. Hmm, I'm going to check our sources. I'm not going to deny the possibility that I fscked up when I merged those changes into the 0.9.7 branch, although I'm fairly sure I merged in all relevant patches. ----- Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte \ Tunnlandsv�gen 52 \ [EMAIL PROTECTED] [EMAIL PROTECTED] \ S-168 36 BROMMA \ T: +46-708-26 53 44 \ SWEDEN \ Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED] Member of the OpenSSL development team: http://www.openssl.org/ Unsolicited commercial email is subject to an archival fee of $400. See <http://www.stacken.kth.se/~levitte/mail/> for more info. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
