Do you have the right directory-structure in place for openssl ca?
In the configfile there should be paths to files. And in the directory used for the entire CA-path, you need the file "serial" with the next available serialnumber for the upcoming cert.
All these files are clearly mentioned in the ca.cnf file you are using already.
And it's clearly written down
here in the manpage
Hope this helps
