Generating keys...

riahc3

Hello

Im trying to generate a server key and Im trying this:

openssl req -days 3650 -batch -new -keyout /my-ca/companysrv.key -out /my-ca/companysrv.csr -notes -extensions server -config

But it seems that there is something missing....

maikcat

there are 2 commands which must executed,
first you create a csr THEN sign it

openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -extensions server -config %KEY_CONFIG%

Michael.

riahc3

What is "%KEY_CONFIG%"?

riahc3

openssl req -days 3650 -nodes -new -keyout /company-ca/companysvr.key -out /company-ca/companysvr.csr -config companySVR.conf

Putting that line results in:

error on line -1 of companySVR.conf
3073799868:error:02001002:system library:fopen:No such file or directory:bss_file.c:169:fopen('companySVR.conf','rb')
3073799868:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:172:
3073799868:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:

maikcat

key config is openssl.cnf

can you post the contents of companySVR.conf?

Michael.