Problem generating a CSR

Posted on 2004-04-16
Medium Priority
Last Modified: 2010-03-04
Background:  I am trying to generate a CSR, so I can submit to our CA to obtain a cert.
My environment is:  Windows2k, Apache 2.0.48 w/ OpenSSL 0.9.7c

When I type:
openssl req -new -nodes -keyout myserver.key -out server.csr

Receive the following error msg:
unable to find 'distinguished_name' in config
problems making certificate request
1440:error:0E06D06A:configuration file routines:NCONF_get_string:no string or environment variable:.\crypto\conf\conf_lib.c:325:

I realize this forum is not necessarily focused on providing Apache and/or OpenSSL support, but there doesn't seem to be one that is that I can find.  So, thought I would start here and perhaps obtain some sort of direction from someone here.

Thanks to all who take this question under consideration !

Question by:NixGuy
  • 2
  • 2
LVL 15

Expert Comment

ID: 10847358
NixGuy -

According to Thawte.com (one Cert Authority), for OpenSSL (modSSL), to generate a csr, you do the following two commands (first to generate the key, and then to generate the CSR):

 openssl genrsa -des3 -out www.virtualhost.com.key 1024
 openssl req -new -key www.virtualhost.com.key -out www.virtualhost.com.csr

FWIW, I'm not familiar with the 'nodes' option.

Author Comment

ID: 10860907

This did not work.  Any other suggestions from anyone ?

Thanks anyhow !

Expert Comment

ID: 11013814
NixGuy did you ever find a solution to this problem?

I am encountering the same problem

Accepted Solution

MrEyes earned 500 total points
ID: 11014062

After posting I continued to search for a solution and luckily I found one, hopefully this will also help you if you havent fixed it already.

when you generate the CSR use the -config switch to point to your config file :

In my case :

openssl req -new -nodes -keyout myserver.key -out server.csr -config OpenSSL.cnf

When I encountered my problem, I was following the tutorial located at :

The remainder of the tutorial is spot on

(the config file they use is downloadable from the site via the "Download the code for this article" link on the left hand side of the page)

M Reyes


Author Comment

ID: 11018274
MrEyes & All,

Yes, earlier I did resolve using the '-config' option as well.  I was a bit laxed on not updating this issue.  Thanks for updating, as it prompted an email to me as a reminder.

Thanks Again !

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

If your site has a few sections that need to be secure when data is transmitted between the server and local computer, such as a /order/ section for ordering or /customer/ which contains customer data, etc it would of course be recommended to secure…
It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …
Watch the video to know the simple way to remove or recover or reset lost or forgotten passwords of Outlook PST file. With Kernel Outlook Password Recovery tool such operation is very easy to perform. It is a freeware with limitation to use with 500…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question