Re: Certificate Signing Request & Key Generation
Hi Oliver, The minimal command to generate a CSR is simple: openssl req -new However, your problem seems related to the openssl config file. Suggest you to start with the default config file. Rgds. Martin Oliver Koenig wrote: > Hello guys,I have a problem with my Certificate Signing request. > Could you please let me know which commands I have to execute in order > to generate a key and a certificate signing request. I have asked > thawte.com for help, but they gave me the worng instruction. I hava an > Apache SSL 1.3.9, a 1.3.7 patch and OpenSSL 0.9.4? Maybe i am just too > stupid for this!! I am not a real PC-wiz. sorry! Pelase see the > attached e-mail. Thanks you very much,Oliver __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Certificate Signing Request & Key Generation
> Oliver Koenig schrieb: > > Hello guys, > I have a problem with my Certificate Signing request. Could you please > let me know which commands I have to execute in order to generate a > key and a certificate signing request. > > I have asked thawte.com for help, but they gave me the worng > instruction. I hava an Apache SSL 1.3.9, a 1.3.7 patch and OpenSSL > 0.9.4? Maybe i am just too stupid for this!! I am not a real PC-wiz. > sorry! > bash-2.03# pwd > /usr/local/ssl/certs > bash-2.03# openssl req -new -key ../private/www.windreiter.com.key > >www.windreiter.com.csr > Using configuration from /usr/local/openssl-0.9.4/openssl.cnf > Unable to load config info Your config file has not been found. Try openssl req -config where_your_openssl.cnf_is -new -key ../private/www.windreiter.com.key > www.windreiter.com.csr -- Holger Reif Tel.: +49 361 74707-0 SmartRing GmbH Fax.: +49 361 7470720 Europaplatz 5 [EMAIL PROTECTED] D-99091 ErfurtWWW.SmartRing.de __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: Certificate Signing Request & Key Generation
Well the obvious error is the following message: Using configuration from /usr/local/openssl-0.9.4/openssl.cnf Unable to load config info You should use the -config option with the 'openssl req' command to tell it where your openssl.cnf file is located. Ollie > -Original Message- > From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, January 06, 2000 4:27 PM > To: [EMAIL PROTECTED] > Subject: Certificate Signing Request & Key Generation > > Hello guys, > I have a problem with my Certificate Signing request. Could you please let > me know which commands I have to execute in order to generate a key and a > certificate signing request. > > I have asked thawte.com for help, but they gave me the worng instruction. > I hava an Apache SSL 1.3.9, a 1.3.7 patch and OpenSSL 0.9.4? Maybe i am > just too stupid for this!! I am not a real PC-wiz. sorry! > > Pelase see the attached e-mail. > > Thanks you very much, > Oliver << Message: Re: Support Wizard:SSL >> __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Certificate Signing Request & Key Generation
In your attached file: bash-2.03# openssl req -new -key ../private/www.windreiter.com.key > www.windreiter.com.csr Using configuration from /usr/local/openssl-0.9.4/openssl.cnf Unable to load config info Enter PEM pass phrase: unable to find 'distinguished_name' in config problems making Certificate Request The problem is that config file could not be loaded. You should update the openssl.cnf by your way, also think it as default file. Then command: openssl req -new -key ../private/www.windreiter.com.key -config /your_config_file_dir/your_config.cnf > www.windreiter.com.csr Dennis - Original Message - From: Oliver Koenig To: [EMAIL PROTECTED] Sent: Thursday, January 06, 2000 8:27 AM Subject: Certificate Signing Request & Key Generation Hello guys, I have a problem with my Certificate Signing request. Could you please let me know which commands I have to execute in order to generate a key and a certificate signing request. I have asked thawte.com for help, but they gave me the worng instruction. I hava an Apache SSL 1.3.9, a 1.3.7 patch and OpenSSL 0.9.4? Maybe i am just too stupid for this!! I am not a real PC-wiz. sorry! Pelase see the attached e-mail. Thanks you very much, Oliver
Re: Certificate Signing Request & Key Generation
Oliver, My secure webservers run ApacheSSL + mod_SSL and the OpenSSL library. I used (and you can also use) Thawte's instructions involving ssleay (unfortunately, their site is down right now, and I can't remember the URL of the exact page) Use the openssl command wherever you're told to use ssleay > Oliver Koenig wrote: > > Hello guys, > I have a problem with my Certificate Signing request. Could you please > let me know which commands I have to execute in order to generate a > key and a certificate signing request. > > I have asked thawte.com for help, but they gave me the worng > instruction. I hava an Apache SSL 1.3.9, a 1.3.7 patch and OpenSSL > 0.9.4? Maybe i am just too stupid for this!! I am not a real PC-wiz. > sorry! > > Pelase see the attached e-mail. > > Thanks you very much, > Oliver > >Name: Re Support WizardSSL.eml >Re Support WizardSSL.emlType: Microsoft MHTML Document 5.0 > (message/rfc822) >Encoding: 7bit -- North Shore Technologies Corporation - Steven J. Sobol, President & Head Geek 815 Superior Avenue #610, Cleveland, Ohio 44114, USAPhone +1 888.480.4NET [EMAIL PROTECTED] http://NorthShoreTechnologies.net Owned and loved by the dogs of Jaymist Chinese Shar-Pei, Montville, Ohio :) Alcohol and calculus don't mix.. Never drink and derive. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
