Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Problem generating a CSR

Posted on 2004-04-16
5
Medium Priority
?
477 Views
Last Modified: 2010-03-04
Background:  I am trying to generate a CSR, so I can submit to our CA to obtain a cert.
My environment is:  Windows2k, Apache 2.0.48 w/ OpenSSL 0.9.7c

When I type:
openssl req -new -nodes -keyout myserver.key -out server.csr

Receive the following error msg:
unable to find 'distinguished_name' in config
problems making certificate request
1440:error:0E06D06A:configuration file routines:NCONF_get_string:no string or environment variable:.\crypto\conf\conf_lib.c:325:

I realize this forum is not necessarily focused on providing Apache and/or OpenSSL support, but there doesn't seem to be one that is that I can find.  So, thought I would start here and perhaps obtain some sort of direction from someone here.

Thanks to all who take this question under consideration !




0
Comment
Question by:NixGuy
  • 2
  • 2
5 Comments
 
LVL 15

Expert Comment

by:periwinkle
ID: 10847358
NixGuy -

According to Thawte.com (one Cert Authority), for OpenSSL (modSSL), to generate a csr, you do the following two commands (first to generate the key, and then to generate the CSR):

 openssl genrsa -des3 -out www.virtualhost.com.key 1024
 openssl req -new -key www.virtualhost.com.key -out www.virtualhost.com.csr

FWIW, I'm not familiar with the 'nodes' option.
0
 

Author Comment

by:NixGuy
ID: 10860907
periwinkle,

This did not work.  Any other suggestions from anyone ?

Thanks anyhow !
0
 

Expert Comment

by:MrEyes
ID: 11013814
NixGuy did you ever find a solution to this problem?

I am encountering the same problem
0
 

Accepted Solution

by:
MrEyes earned 500 total points
ID: 11014062
NixGuy

After posting I continued to search for a solution and luckily I found one, hopefully this will also help you if you havent fixed it already.

when you generate the CSR use the -config switch to point to your config file :

In my case :

openssl req -new -nodes -keyout myserver.key -out server.csr -config OpenSSL.cnf

When I encountered my problem, I was following the tutorial located at :
http://www.devx.com/opensource/Article/20085

The remainder of the tutorial is spot on

(the config file they use is downloadable from the site via the "Download the code for this article" link on the left hand side of the page)

Regards
M Reyes

0
 

Author Comment

by:NixGuy
ID: 11018274
MrEyes & All,

Yes, earlier I did resolve using the '-config' option as well.  I was a bit laxed on not updating this issue.  Thanks for updating, as it prompted an email to me as a reminder.

Thanks Again !
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hi, in this article I'm going to teach you how to run your own site, and how to let people in (without IP). I'll talk about and explain each step... :) By the way, everything in this Tutorial is completely free and legal. This article is for …
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
Suggested Courses
Course of the Month12 days, 5 hours left to enroll

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question