Solved

Problem generating a CSR

Posted on 2004-04-16
5
459 Views
Last Modified: 2010-03-04
Background:  I am trying to generate a CSR, so I can submit to our CA to obtain a cert.
My environment is:  Windows2k, Apache 2.0.48 w/ OpenSSL 0.9.7c

When I type:
openssl req -new -nodes -keyout myserver.key -out server.csr

Receive the following error msg:
unable to find 'distinguished_name' in config
problems making certificate request
1440:error:0E06D06A:configuration file routines:NCONF_get_string:no string or environment variable:.\crypto\conf\conf_lib.c:325:

I realize this forum is not necessarily focused on providing Apache and/or OpenSSL support, but there doesn't seem to be one that is that I can find.  So, thought I would start here and perhaps obtain some sort of direction from someone here.

Thanks to all who take this question under consideration !




0
Comment
Question by:NixGuy
  • 2
  • 2
5 Comments
 
LVL 15

Expert Comment

by:periwinkle
ID: 10847358
NixGuy -

According to Thawte.com (one Cert Authority), for OpenSSL (modSSL), to generate a csr, you do the following two commands (first to generate the key, and then to generate the CSR):

 openssl genrsa -des3 -out www.virtualhost.com.key 1024
 openssl req -new -key www.virtualhost.com.key -out www.virtualhost.com.csr

FWIW, I'm not familiar with the 'nodes' option.
0
 

Author Comment

by:NixGuy
ID: 10860907
periwinkle,

This did not work.  Any other suggestions from anyone ?

Thanks anyhow !
0
 

Expert Comment

by:MrEyes
ID: 11013814
NixGuy did you ever find a solution to this problem?

I am encountering the same problem
0
 

Accepted Solution

by:
MrEyes earned 250 total points
ID: 11014062
NixGuy

After posting I continued to search for a solution and luckily I found one, hopefully this will also help you if you havent fixed it already.

when you generate the CSR use the -config switch to point to your config file :

In my case :

openssl req -new -nodes -keyout myserver.key -out server.csr -config OpenSSL.cnf

When I encountered my problem, I was following the tutorial located at :
http://www.devx.com/opensource/Article/20085

The remainder of the tutorial is spot on

(the config file they use is downloadable from the site via the "Download the code for this article" link on the left hand side of the page)

Regards
M Reyes

0
 

Author Comment

by:NixGuy
ID: 11018274
MrEyes & All,

Yes, earlier I did resolve using the '-config' option as well.  I was a bit laxed on not updating this issue.  Thanks for updating, as it prompted an email to me as a reminder.

Thanks Again !
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Over the last year I have answered a couple of basic URL rewriting questions several times so I thought I might as well have a stab at: explaining the basics, providing a few useful links and consolidating some of the most common queries into a sing…
Hi, in this article I'm going to teach you how to run your own site, and how to let people in (without IP). I'll talk about and explain each step... :) By the way, everything in this Tutorial is completely free and legal. This article is for …
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now