[HowTo] Create your own SSL CA and secure multiple services

[rethus]

(05-20-2008 03:28 AM)fulltilt Wrote:  error by certificate generation

if i use:

Code:

openssl genrsa -out apache.key.pem -rand private/.rand 2048
openssl req -new -key apache.key.pem -out apache.req.pem
openssl ca -name RootCA -in apache.req.pem -out apache.cert.pem

i get this error in last step openssl ca:

Code:

Using configuration from /usr/lib/ssl/openssl.cnf
variable lookup failed for RootCA::private_key
21745:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=RootCA name=private_key

Had the same Problem here. Found the Solution:

You have to enter the exactly String for Parm -name which u have defined in /usr/lib/ssl/openssl.cnf in the Section [ca].

For me, my CA named xstableCA, but into openssl.cnf i had create the section as [xstable_CA].
So if i enter

Code:

openssl ca -name xstable_CA -in apache.req.pem -out apache.cert.pem

it works for me.