This is a new thread evolved from the
Discussion about "Keeping Openssl Up to Date" at
http://forums.freebsd.org/showthread.php?p=171433#post171433
I want to create a Certificate Authority on my server.
I enter this to create my CA:
[cmd=]openssl req -nodes -new -days 3650 -x509 -keyout private/cakey.pem -out cacert.pem[/cmd]
I get this error:
I see from other posts on this forum, the error shows me that the command cannot find the openssl.cnf file. But, it IS exactly where it says it cannot find it; that is, in /etc/ssl, right where it's "supposed" to be. The other posts point out that the file cannot be found, but they offer no solution as to where it should be put so that it can be found.
So, I do a little thinking. Maybe it will be found if I put it in /usr/local/sbin. Nope! Doesn't work. Same error. I try putting it all over the place. I try using soft links to it from other directories. Nope! I even put it into the exact same directory where I will keep my certs. The same directory where I issue the command. Nope! Nope! That does not work either. The file is never found, no matter where I put it.
Did I write the command wrong?
If I try it in the style of other 'nixes, it does not work either. I've tried many variations of the command. So far, no matter what, it never works.
It is suggested to re-copy openssl.cnf "from the original" in /usr/src/crypto/.... There is no such directory on my system! Is that something new for FreeBSD 9.0?
I received a PM telling me to try a [cmd=]make install clean[/cmd] of OpenSSL. I upgraded my ports tree with portsnap, and did the new install. No change. There is still no /usr/src/crypto/... directory.
Any ideas? What do you think is the solution?
I want to make a CA and sign my own certs for my 7 virtuals.
I am using FreeBSD 9.0 with openssl 9.8q.
Thanks.
Discussion about "Keeping Openssl Up to Date" at
http://forums.freebsd.org/showthread.php?p=171433#post171433
I want to create a Certificate Authority on my server.
I enter this to create my CA:
[cmd=]openssl req -nodes -new -days 3650 -x509 -keyout private/cakey.pem -out cacert.pem[/cmd]
I get this error:
Code:
Unable to load config info from /etc/ssl/openssl.cnfSo, I do a little thinking. Maybe it will be found if I put it in /usr/local/sbin. Nope! Doesn't work. Same error. I try putting it all over the place. I try using soft links to it from other directories. Nope! I even put it into the exact same directory where I will keep my certs. The same directory where I issue the command. Nope! Nope! That does not work either. The file is never found, no matter where I put it.
Did I write the command wrong?
If I try it in the style of other 'nixes, it does not work either. I've tried many variations of the command. So far, no matter what, it never works.
It is suggested to re-copy openssl.cnf "from the original" in /usr/src/crypto/.... There is no such directory on my system! Is that something new for FreeBSD 9.0?
I received a PM telling me to try a [cmd=]make install clean[/cmd] of OpenSSL. I upgraded my ports tree with portsnap, and did the new install. No change. There is still no /usr/src/crypto/... directory.
Any ideas? What do you think is the solution?
I want to make a CA and sign my own certs for my 7 virtuals.
I am using FreeBSD 9.0 with openssl 9.8q.
Thanks.