/usr/local/openssl/ssl/bin/openssl version OpenSSL 1.0.0e 6 Sep 2011
- Simon Charles - > Date: Thu, 13 Dec 2012 19:53:40 +0100 > From: st...@openssl.org > To: openssl-users@openssl.org > Subject: Re: Openssl default_ca values while using HSM - LunaCA3 > > On Thu, Dec 13, 2012, simon charles wrote: > > > > > Dr. Stephen , > > Thank you for your reply - here is the output of your recommended > > command line > > > > /usr/local/openssl/ssl/bin/openssl ca -config CA.cnf -engine LunaCA3 > > -keyfile "root-ca" -keyform ENGINE -in test-svr-010req.pem -out > > test-svr-010.pem -batch > > Using configuration from CA.cnf > > engine "LunaCA3" set. > > unable to load certificate > > 3086288524:error:02001002:system library:fopen:No such file or > > directory:bss_file.c:169:fopen('root-ca','r') * > > 3086288524:error:2006D080:BIO routines:BIO_new_file:no such > > file:bss_file.c:172: > > 3086288524:error:0906D06C:PEM routines:PEM_read_bio:no start > > line:pem_lib.c:696: > > > > * Looks like it is trying to read the key from disk on not from the HSM. > > > > Weird. What version of OpenSSL is that? > > I checked the source and it *should* be passing the key format parameter to > the load_key function. Can you check under a debugger? > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org