RE: Issue generating certificate for a Samba AD - index.txt
Hi Sergio Thanks a lot My goal is to achieve a SAMBA auth using PKi ( as per ref here : https://wiki.samba.org/index.php/Samba_AD_Smart_Card_Login ) More specifically, related then to openSSL, this chapter https://wiki.samba.org/index.php/Samba_AD_Smart_Card_Login#Prerequisites sounds achievable for you ? Thanks a lot Lionel From: Sergio NNX [mailto:sfhac...@hotmail.com] Sent: 18 March 2020 23:13 To: Lionel Monchecourt; openssl-users@openssl.org Subject: Re: Issue generating certificate for a Samba AD - index.txt We have been creating certificates (Root CA, intermediate, end user, smartcard login, etc) for ages. We have set up our own PKI infrastructure using openssl command line tool. If you email us the details/extensions you need your certificates to have, we can generate some test certs for you. How familiar are you with OpenSSL? Regards. _ From: openssl-users on behalf of Lionel Monchecourt Sent: Thursday, 19 March 2020 8:27 AM To: openssl-users@openssl.org Subject: Issue generating certificate for a Samba AD - index.txt Hi , trying to generate a certify using openssl copenssl ca -config /etc/ssl/user-openssl.cnf -in dc-req.pem -out dc-cert.pem I get the following : Using configuration from /etc/ssl/user-openssl.cnf Enter pass phrase for ./private/cakey.pem: 139946396877888:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:69:fopen('./index.txt','r') 139946396877888:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:76: I found a post saying that you just need to create the index.txt file,but it leads to "no result " Another post was saying to insert in the file "unique_subject = no" Nothing at all ( putting yes or no ), as attempts. Any insights ? Thx <https://www.avast.com/sig-email?utm_medium=email_source=link_campai gn=sig-email_content=emailclient> Virus-free. <https://www.avast.com/sig-email?utm_medium=email_source=link_campai gn=sig-email_content=emailclient> www.avast.com -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus
Re: Issue generating certificate for a Samba AD - index.txt
We have been creating certificates (Root CA, intermediate, end user, smartcard login, etc) for ages. We have set up our own PKI infrastructure using openssl command line tool. If you email us the details/extensions you need your certificates to have, we can generate some test certs for you. How familiar are you with OpenSSL? Regards. From: openssl-users on behalf of Lionel Monchecourt Sent: Thursday, 19 March 2020 8:27 AM To: openssl-users@openssl.org Subject: Issue generating certificate for a Samba AD - index.txt Hi , trying to generate a certify using openssl copenssl ca -config /etc/ssl/user-openssl.cnf -in dc-req.pem -out dc-cert.pem I get the following : Using configuration from /etc/ssl/user-openssl.cnf Enter pass phrase for ./private/cakey.pem: 139946396877888:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:69:fopen('./index.txt','r') 139946396877888:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:76: I found a post saying that you just need to create the index.txt file,but it leads to “no result “ Another post was saying to insert in the file “unique_subject = no” Nothing at all ( putting yes or no ), as attempts… Any insights ? Thx [https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif]<https://www.avast.com/sig-email?utm_medium=email_source=link_campaign=sig-email_content=emailclient> Virus-free. www.avast.com<https://www.avast.com/sig-email?utm_medium=email_source=link_campaign=sig-email_content=emailclient>
Issue generating certificate for a Samba AD - index.txt
Hi , trying to generate a certify using openssl copenssl ca -config /etc/ssl/user-openssl.cnf -in dc-req.pem -out dc-cert.pem I get the following : Using configuration from /etc/ssl/user-openssl.cnf Enter pass phrase for ./private/cakey.pem: 139946396877888:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:69:fopen('./index.txt','r') 139946396877888:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:76: I found a post saying that you just need to create the index.txt file,but it leads to "no result " Another post was saying to insert in the file "unique_subject = no" Nothing at all ( putting yes or no ), as attempts. Any insights ? Thx -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus