"configuration of openssl" or "how to adjust openssl.cnf".

[peasthope@shaw.ca]

Hello again,

To make an own CA, try to sign a certificate.
carnot:/etc/ssl/localcerts# openssl ca -in daltonOpenVPN.csr -out daltonOpenVPN.crt
Using configuration from /usr/lib/ssl/openssl.cnf
Error opening CA private key ./demoCA/private/cakey.pem
  ...

carnot:/etc/ssl/localcerts# cd ..
carnot:/etc/ssl# ls openssl.cnf
openssl.cnf

It used /usr/lib/ssl/openssl.cnf rather than /etc/ssl/openssl.cnf ?

carnot:/etc/ssl# grep demoCA openssl.cnf
dir     = ./demoCA        # Where everything is kept
carnot:/etc/ssl# ls demoCA
ls: cannot access demoCA: No such file or directory

Appears that /etc/ssl/openssl.cnf has never been adjusted to fit this squeeze.

carnot:/etc/ssl# dpkg-reconfigure openssl
carnot:/etc/ssl#

No help there!

carnot:/etc/ssl# man openssl.cnf
No manual entry for openssl.cnf
carnot:/etc/ssl$ man openssl | grep openssl.cnf
carnot:/etc/ssl$ 

Googling "site:debian.org openssl.cnf" yields bug reports and 
complaints.

Is openssl.cnf documented?

Thanks,            ... Peter E.




-- 
123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
Tel +13606390202  Bcc: peasthope at shaw.ca  http://carnot.yi.org/  
"http://members.shaw.ca/peasthope/index.html#Itinerary "