On Mon, Nov 22, 2004, Dan O'Brien wrote: > > Searched for openssl.cnf and it is on the system: > > [EMAIL PROTECTED]:/etc/ssl# locate openssl.cnf > /usr/lib/ssl/openssl.cnf > > Is this a clue to the problem? >
Might be :-) Depends what's in that file. Does it contain a line with: [distinguished_name] on it? Does it have world read permissions? What happens if you include the command line switch: -config /usr/lib/ssl/openssl.cnf to the req command that was failing before? > We're running openssl as part of the Debian apache-ssl package. > Successfully removed openssl 0.9.6 using the standard apt-get remove > Debian tool, but unexpectedly uninstalled apache as well. Will an > installation of openssl 0.9.7e overwrite the existing version? How do > we install the new version of openssl without disrupting apache? > > Optionally, should we skip the apt-get, uninstall everything, and > re-install manually? > If you install OpenSSL 0.9.7e from source it will by default install under /usr/local so you should be OK. You'll however have to put /usr/local/bin earlier in your path so it picks up the new binary before the old one. If you mean using apt-get for 0.9.7e (assuming that's possible) then it will do whatever they've set it to do... Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
