Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Problem generating a CSR

Posted on 2004-04-16
5
Medium Priority
?
473 Views
Last Modified: 2010-03-04
Background:  I am trying to generate a CSR, so I can submit to our CA to obtain a cert.
My environment is:  Windows2k, Apache 2.0.48 w/ OpenSSL 0.9.7c

When I type:
openssl req -new -nodes -keyout myserver.key -out server.csr

Receive the following error msg:
unable to find 'distinguished_name' in config
problems making certificate request
1440:error:0E06D06A:configuration file routines:NCONF_get_string:no string or environment variable:.\crypto\conf\conf_lib.c:325:

I realize this forum is not necessarily focused on providing Apache and/or OpenSSL support, but there doesn't seem to be one that is that I can find.  So, thought I would start here and perhaps obtain some sort of direction from someone here.

Thanks to all who take this question under consideration !




0
Comment
Question by:NixGuy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 15

Expert Comment

by:periwinkle
ID: 10847358
NixGuy -

According to Thawte.com (one Cert Authority), for OpenSSL (modSSL), to generate a csr, you do the following two commands (first to generate the key, and then to generate the CSR):

 openssl genrsa -des3 -out www.virtualhost.com.key 1024
 openssl req -new -key www.virtualhost.com.key -out www.virtualhost.com.csr

FWIW, I'm not familiar with the 'nodes' option.
0
 

Author Comment

by:NixGuy
ID: 10860907
periwinkle,

This did not work.  Any other suggestions from anyone ?

Thanks anyhow !
0
 

Expert Comment

by:MrEyes
ID: 11013814
NixGuy did you ever find a solution to this problem?

I am encountering the same problem
0
 

Accepted Solution

by:
MrEyes earned 500 total points
ID: 11014062
NixGuy

After posting I continued to search for a solution and luckily I found one, hopefully this will also help you if you havent fixed it already.

when you generate the CSR use the -config switch to point to your config file :

In my case :

openssl req -new -nodes -keyout myserver.key -out server.csr -config OpenSSL.cnf

When I encountered my problem, I was following the tutorial located at :
http://www.devx.com/opensource/Article/20085

The remainder of the tutorial is spot on

(the config file they use is downloadable from the site via the "Download the code for this article" link on the left hand side of the page)

Regards
M Reyes

0
 

Author Comment

by:NixGuy
ID: 11018274
MrEyes & All,

Yes, earlier I did resolve using the '-config' option as well.  I was a bit laxed on not updating this issue.  Thanks for updating, as it prompted an email to me as a reminder.

Thanks Again !
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…
Suggested Courses

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question