The cacert.pem is at /opt/exampleca Would you please tell me what exactly the entry for the "certificate" should be in the config file...
Sorry for the trouble. Thanks so much Bindu --- "Bommareddy, Satish (Satish)" <[EMAIL PROTECTED]> wrote: > and where is the ca certificate? cacert.pem or what > ever the > certificate =$dir/cacert.pem > is pointing to in openssl.cnf > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Bindu > Sent: Friday, July 30, 2004 5:15 PM > To: [EMAIL PROTECTED] > Subject: RE: Need help asap... > > > > cakey.pem is already there. > > > --- "Bommareddy, Satish (Satish)" > <[EMAIL PROTECTED]> > wrote: > > > you will have to move the cakey.pem to > > /opt/exampleca/private/ directory > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf > Of > > Bindu > > Sent: Friday, July 30, 2004 5:05 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Need help asap... > > > > > > Hi, > > > > I moved the config file to > > /opt/exampleca/private/openssl.cnf > > > > It still did nto work. > > > > [EMAIL PROTECTED] exampleca]# > > OPENSSL_CONF=/opt/exampleca/private/openssl.cnf > > [EMAIL PROTECTED] exampleca]# export OPENSSL_CONF > > [EMAIL PROTECTED] exampleca]# openssl ca -in > > testreq.pem > > Using configuration from > > /opt/exampleca/private/openssl.cnf > > Enter pass phrase for > > /opt/exampleca/private/cakey.pem: > > Error opening CA certificate > > 7728:error:02001002:system library:fopen:No such > > file > > or directory:bss_file.c:259:fopen('','r') > > 7728:error:20074002:BIO routines:FILE_CTRL:system > > lib:bss_file.c:261: > > unable to load certificate > > [EMAIL PROTECTED] exampleca]# > > > > I have the openssl-0.9.7a version running on Linux > > now. I have also installed openssl-0.9.7d but > still > > when I run "version" command at the openssl > prompt, > > it > > shows me that I am using the earlier version. > > > > Will changing the version to .7d do any help? and > if > > so how can I change it and get the latest version > > running? > > > > Thanks so much for the help. > > Bindu > > --- "Bommareddy, Satish (Satish)" > > <[EMAIL PROTECTED]> > > wrote: > > > > > u can either update the openssl.cnf to look in > > > /try/caex/cakey.pem, > > > or you can move the cakey.pem from /try/caex/ to > > > /opt/exampleca/private/ > > > and try > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] > Behalf > > Of > > > Bindu > > > Sent: Friday, July 30, 2004 3:20 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: Need help asap... > > > > > > > > > I have the config file at > > > usr/local/ssl/lib/openssl.cnf > > > > > > I used the environment variable OPENSSL_CONF to > > find > > > the config file. > > > > > > I have the cakey.pem at /try/caex/cakey.pem > > > > > > Do I need to change the location where I have > > stored > > > the config key?? > > > > > > Please guide. > > > > > > Thanks, > > > Bindu > > > --- "Bommareddy, Satish (Satish)" > > > <[EMAIL PROTECTED]> > > > wrote: > > > > > > > looks to me like it is not able to find > > cakey.pem > > > > is the path in openssl.cnf pointing to where > the > > > > cakey.pen resides? > > > > that is one place to look at > > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] > > > > [mailto:[EMAIL PROTECTED] > > Behalf > > > Of > > > > Bindu > > > > Sent: Friday, July 30, 2004 2:18 PM > > > > To: [EMAIL PROTECTED] > > > > Subject: Need help asap... > > > > > > > > > > > > Hi all, > > > > I am a graduate student and all new to Linux. > I > > > am > > > > trying to set up a CA and issue/revoke > > > certificates > > > > using OPENSSL. I wanted to test using a test > > > > certificate request and then issue and revoke. > > But > > > I > > > > am kind of stuck at a point. Please help me. > > > > > > > > I successfully created the CA and submitted a > > > > request. > > > > But when I am trying to issue the certificate, > I > > > get > > > > an error. > > > > > > > > [EMAIL PROTECTED] exampleca]# > > > > OPENSSL_CONF=/usr/local/ssl/lib/openssl.cnf > > > > [EMAIL PROTECTED] exampleca]# export > > OPENSSL_CONF > > > > [EMAIL PROTECTED] exampleca]# openssl ca -in > > > > testreq.pem > > > > Using configuration from > > > > /usr/local/ssl/lib/openssl.cnf > > > > Enter pass phrase for > > > > /opt/exampleca/private/cakey.pem: > > > > Error opening CA certificate > > > > 7423:error:02001002:system library:fopen:No > such > > > > file > > > > or directory:bss_file.c:259:fopen('','r') > > > > 7423:error:20074002:BIO > > routines:FILE_CTRL:system > > > > lib:bss_file.c:261: > > > > unable to load certificate > > > > [EMAIL PROTECTED] exampleca]# > > > > > > > > > > > > All the help is most appreciated. > > > > > > > > Thanks, > > > > Bindu > > > > > > > > > > > > ===== > > > > Good things come in small packages. Make the > > most > > > of > > > > them... > > > > > > > > > > > > > > > > > > > > > > __________________________________________________ > > > > Do You Yahoo!? > > > > Tired of spam? Yahoo! Mail has the best spam > > > > protection around > > > > http://mail.yahoo.com > > > > > > > > > > ______________________________________________________________________ > === message truncated === ===== Good things come in small packages. Make the most of them... _______________________________ Do you Yahoo!? Express yourself with Y! Messenger! Free. Download now. http://messenger.yahoo.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
