Solved

Problem generating a CSR

Posted on 2004-04-16
5
453 Views
Last Modified: 2010-03-04
Background:  I am trying to generate a CSR, so I can submit to our CA to obtain a cert.
My environment is:  Windows2k, Apache 2.0.48 w/ OpenSSL 0.9.7c

When I type:
openssl req -new -nodes -keyout myserver.key -out server.csr

Receive the following error msg:
unable to find 'distinguished_name' in config
problems making certificate request
1440:error:0E06D06A:configuration file routines:NCONF_get_string:no string or environment variable:.\crypto\conf\conf_lib.c:325:

I realize this forum is not necessarily focused on providing Apache and/or OpenSSL support, but there doesn't seem to be one that is that I can find.  So, thought I would start here and perhaps obtain some sort of direction from someone here.

Thanks to all who take this question under consideration !




0
Comment
Question by:NixGuy
  • 2
  • 2
5 Comments
 
LVL 15

Expert Comment

by:periwinkle
ID: 10847358
NixGuy -

According to Thawte.com (one Cert Authority), for OpenSSL (modSSL), to generate a csr, you do the following two commands (first to generate the key, and then to generate the CSR):

 openssl genrsa -des3 -out www.virtualhost.com.key 1024
 openssl req -new -key www.virtualhost.com.key -out www.virtualhost.com.csr

FWIW, I'm not familiar with the 'nodes' option.
0
 

Author Comment

by:NixGuy
ID: 10860907
periwinkle,

This did not work.  Any other suggestions from anyone ?

Thanks anyhow !
0
 

Expert Comment

by:MrEyes
ID: 11013814
NixGuy did you ever find a solution to this problem?

I am encountering the same problem
0
 

Accepted Solution

by:
MrEyes earned 250 total points
ID: 11014062
NixGuy

After posting I continued to search for a solution and luckily I found one, hopefully this will also help you if you havent fixed it already.

when you generate the CSR use the -config switch to point to your config file :

In my case :

openssl req -new -nodes -keyout myserver.key -out server.csr -config OpenSSL.cnf

When I encountered my problem, I was following the tutorial located at :
http://www.devx.com/opensource/Article/20085

The remainder of the tutorial is spot on

(the config file they use is downloadable from the site via the "Download the code for this article" link on the left hand side of the page)

Regards
M Reyes

0
 

Author Comment

by:NixGuy
ID: 11018274
MrEyes & All,

Yes, earlier I did resolve using the '-config' option as well.  I was a bit laxed on not updating this issue.  Thanks for updating, as it prompted an email to me as a reminder.

Thanks Again !
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Over the last year I have answered a couple of basic URL rewriting questions several times so I thought I might as well have a stab at: explaining the basics, providing a few useful links and consolidating some of the most common queries into a sing…
It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now