Issues creating Certificate Authority

2004-11-17 Thread Dan O'Brien
Hi, We're trying to generate a Certificate Authority on our Debian/Apachessl server. Here's the command we're entering: openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 7000 The above command kicks back the following error: unable to find 'distinguished_name' in config pro

Re: Issues creating Certificate Authority

2004-11-17 Thread Dr. Stephen Henson
On Wed, Nov 17, 2004, Dan O'Brien wrote: > > Hi, > > We're trying to generate a Certificate Authority on our > Debian/Apachessl server. Here's the command we're entering: > > openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days > 7000 > > The above command kicks back the fo

Re: Issues creating Certificate Authority

2004-11-17 Thread Dan O'Brien
On Nov 17, 2004, at 1:01 PM, Dr. Stephen Henson wrote: On Wed, Nov 17, 2004, Dan O'Brien wrote: Hi, We're trying to generate a Certificate Authority on our Debian/Apachessl server. Here's the command we're entering: openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 7000 The abo

Re: Issues creating Certificate Authority

2004-11-17 Thread Dr. Stephen Henson
On Wed, Nov 17, 2004, Dan O'Brien wrote: > > > Hi Steve, thanks for the response. We did not get this error (or if we > have, we haven't seen it): > > Using configuration from /some/path/openssl.cnf > Unable to load config info > > But we did get this error upon attempting to

Re: Issues creating Certificate Authority

2004-11-18 Thread Dan O'Brien
On Nov 17, 2004, at 7:49 PM, Dr. Stephen Henson wrote: On Wed, Nov 17, 2004, Dan O'Brien wrote: Hi Steve, thanks for the response. We did not get this error (or if we have, we haven't seen it): Using configuration from /some/path/openssl.cnf Unable to load config info But we did ge

Re: Issues creating Certificate Authority

2004-11-18 Thread Dr. Stephen Henson
On Thu, Nov 18, 2004, Dan O'Brien wrote: > > On Nov 17, 2004, at 7:49 PM, Dr. Stephen Henson wrote: > > >On Wed, Nov 17, 2004, Dan O'Brien wrote: > > > >> > >> > >>Hi Steve, thanks for the response. We did not get this error (or if we > >>have, we haven't seen it): > >> > >>Using configu

Re: Issues creating Certificate Authority

2004-11-18 Thread Dan O'Brien
On Nov 18, 2004, at 11:48 AM, Dr. Stephen Henson wrote: On Thu, Nov 18, 2004, Dan O'Brien wrote: On Nov 17, 2004, at 7:49 PM, Dr. Stephen Henson wrote: On Wed, Nov 17, 2004, Dan O'Brien wrote: Hi Steve, thanks for the response. We did not get this error (or if we have, we haven't seen it):

Re: Issues creating Certificate Authority

2004-11-18 Thread Dr. Stephen Henson
On Thu, Nov 18, 2004, Dan O'Brien wrote: > > On Nov 18, 2004, at 11:48 AM, Dr. Stephen Henson wrote: > > >On Thu, Nov 18, 2004, Dan O'Brien wrote: > > > >> > >>On Nov 17, 2004, at 7:49 PM, Dr. Stephen Henson wrote: > >> > >>>On Wed, Nov 17, 2004, Dan O'Brien wrote: > >>> > > > Hi S

Re: Issues creating Certificate Authority

2004-11-18 Thread Dan O'Brien
On Nov 18, 2004, at 12:58 PM, Dr. Stephen Henson wrote: On Thu, Nov 18, 2004, Dan O'Brien wrote: On Nov 18, 2004, at 11:48 AM, Dr. Stephen Henson wrote: On Thu, Nov 18, 2004, Dan O'Brien wrote: On Nov 17, 2004, at 7:49 PM, Dr. Stephen Henson wrote: On Wed, Nov 17, 2004, Dan O'Brien wrote: Hi Steve

Re: Issues creating Certificate Authority

2004-11-18 Thread Dr. Stephen Henson
On Thu, Nov 18, 2004, Dan O'Brien wrote: > > > It's old, but it's the latest in "Debian Stable:" > > [EMAIL PROTECTED]:~# openssl version -a > OpenSSL 0.9.6c 21 dec 2001 > built on: Wed Mar 3 19:09:47 UTC 2004 > platform: debian-i386 > options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16

Re: Issues creating Certificate Authority

2004-11-22 Thread Dan O'Brien
On Nov 18, 2004, at 1:27 PM, Dr. Stephen Henson wrote: On Thu, Nov 18, 2004, Dan O'Brien wrote: It's old, but it's the latest in "Debian Stable:" [EMAIL PROTECTED]:~# openssl version -a OpenSSL 0.9.6c 21 dec 2001 built on: Wed Mar 3 19:09:47 UTC 2004 platform: debian-i386 options: bn(64,32) md2(

Re: Issues creating Certificate Authority

2004-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2004, Dan O'Brien wrote: > > Searched for openssl.cnf and it is on the system: > > [EMAIL PROTECTED]:/etc/ssl# locate openssl.cnf > /usr/lib/ssl/openssl.cnf > > Is this a clue to the problem? > Might be :-) Depends what's in that file. Does it contain a line with: [distinguis

Re: Issues creating Certificate Authority

2004-11-23 Thread Dan O'Brien
On Nov 22, 2004, at 1:41 PM, Dr. Stephen Henson wrote: On Mon, Nov 22, 2004, Dan O'Brien wrote: Searched for openssl.cnf and it is on the system: [EMAIL PROTECTED]:/etc/ssl# locate openssl.cnf /usr/lib/ssl/openssl.cnf Is this a clue to the problem? Might be :-) Depends what's in that file. Does it

Re: Issues creating Certificate Authority

2004-11-23 Thread Charles B Cranston
It's possible from what you describe that it was a hanging alias, that is, a symbolic link pointing to a file that does not actually exist. This looks like a file initially but gets a "file does not exist" when you try to actually use it... Dan O'Brien wrote: On Nov 22, 2004, at 1:41 PM, Dr. Steph

Re: Issues creating Certificate Authority

2004-12-01 Thread Dan O'Brien
On Nov 23, 2004, at 1:59 PM, Charles B Cranston wrote: It's possible from what you describe that it was a hanging alias, that is, a symbolic link pointing to a file that does not actually exist. This looks like a file initially but gets a "file does not exist" when you try to actually use it... Da

Re: Issues creating Certificate Authority

2004-12-01 Thread Dr. Stephen Henson
On Wed, Dec 01, 2004, Dan O'Brien wrote: > On Nov 23, 2004, at 1:59 PM, Charles B Cranston wrote: > > >It's possible from what you describe that it was a > >hanging alias, that is, a symbolic link pointing to > >a file that does not actually exist. This looks like > >a file initially but gets a

RE : Issues creating Certificate Authority

2004-12-02 Thread Frédéric Donnat
#x27;Brien Envoyé : mercredi 1 décembre 2004 17:48 À : [EMAIL PROTECTED] Objet : Re: Issues creating Certificate Authority On Nov 23, 2004, at 1:59 PM, Charles B Cranston wrote: > It's possible from what you describe that it was a > hanging alias, that is, a symbolic link pointing to &

Re: Issues creating Certificate Authority

2004-12-02 Thread Dan O'Brien
OK, installed 0.9.7e and the openssl.cnf file to the right location. Was then able to create the certificate authority. However, the next step, creating the SSL key for apache, met with the following error: [EMAIL PROTECTED]:/etc/ssl# openssl req -new -config ./openssl.cnf -nodes -out ./apache-req

Re: Issues creating Certificate Authority

2004-12-02 Thread Dr. Stephen Henson
On Thu, Dec 02, 2004, Dan O'Brien wrote: > > OK, thanks. However, I'm clueless about how to execute the above > commands. "CA.pl" is an unknown command to my system, and openssl req > doesn't list it as an option. > > What specifically am I missing about your suggestion? > When you install o