[openssl-users] error:02001002:system library:fopen:No such file or directory:.\crypto\bio\bss_file.c
Itsmesri
getur.srikanth at gmail.com
Sun Feb 8 08:16:46 UTC 2015
I am newbie to OPENSSL world.I am trying into install openssl certification
on my microsoft exchange server. For this I was following below article step
by step. at one place I stuck while createing 'ca' and getting below errors.
I have created index.txt , serial files and have proper permissions.
article:
http://www.stephen-scotter.net/computers/windows/exchange/using-openssl-to-create-a-certificate-for-exchange-2010#exchange2010
<http://www.stephen-scotter.net/computers/windows/exchange/using-openssl-to-create-a-certificate-for-exchange-2010#exchange2010>
C:\OpenSSL-Win64>bin\openssl.exe ca -name ServerCA -policy policy_anything
-in SIFY_CA\requests\SIFYSERV4-EXCHANGE.csr -o
t SIFY_CA\certs\SIFYSERV4-EXCHANGE-WRONGFORMAT.cer -md sha1
Using configuration from c:\OpenSSL-Win64\bin\openssl.cfg
Loading 'screen' into random state - done
Enter pass phrase for \\DALLAS\OpenSSL-Win64\SIFY_CA\private\SIFY_CA.key:
Error Loading extension section ca_cert
11128:error:02001002:system library:fopen:No such file or
directory:.\crypto\bio\bss_file.c:169:fopen('\\DALLAS\OpenSSL-Win64\SIFY_CA\index.txt.attr','rb')
11128:error:2006D080:BIO routines:BIO_new_file:no such
file:.\crypto\bio\bss_file.c:172:
11128:error:0E078072:configuration file routines:DEF_LOAD:no such
file:.\crypto\conf\conf_def.c:197:
11128:error:2207507C:X509 V3 routines:v2i_GENERAL_NAME_ex:missing
value:.\crypto\x509v3\v3_alt.c:537:
11128:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
extension:.\crypto\x509v3\v3_conf.c:93:name=subjectAltName, value=D
S:sifytech.com,DNS:www.sifytech.com;DNS:*.sifytech.com,mail.SIFY.com,owa.sifytech.com
openssl.cfg
---------------
HOME = \\\\DALLAS\\OpenSSL-Win64
#RANDFILE = $HOME\\.rnd
[ca]
default_ca = SIFY_CA
[SIFY_CA]
dir = $HOME\\SIFY_CA
certs = $dir\\certs
crl_dir = $dir\\crl
database = $dir\\index.txt
new_certs_dir = $dir\\newcerts
certificate = $certs\\SIFY_CA.cer
serial = $dir\\serial
crl = $crl_dir\\SIFY_CA.crl
private_key = $dir\\private\\SIFY_CA.key
RANDFILE = $dir\\private\\.rnd
unique_subject = no
email_in_dn = yes
policy = policy_match
x509_extensions = ca_cert
default_days = 18250
default_crl_days = 18250
default_md = md5
[ServerCA]
dir = $HOME\\SIFY_CA
certs = $dir\\certs
crl_dir = $dir\\crl
database = $dir\\index.txt
new_certs_dir = $dir\\newcerts
certificate = $certs\\SIFY_CA.cer
serial = $dir\\serial
#####crl = $crl_dir\\ServerCA.crl
crl = $crl_dir\\SIFY_CA.crl
private_key = $dir\\private\\SIFY_CA.key
RANDFILE = $dir\\private\\.rnd
unique_subject = no
email_in_dn = yes
policy = policy_match
x509_extensions = ca_cert
default_days = 18250
default_crl_days = 18250
default_md = md5
#####copy_extensions = copy
#####copy_extensions = none
[policy_match]
countryName = match
stateOrProvinceName = optional
organizationName = optional
organizationalUnitName = supplied
commonName = supplied
emailAddress = optional
[policy_anything]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[req]
default_bits = 2048
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
#attributes = req_attributes
x509_extensions = v3_ca
req_extensions = v3_req
[req_distinguished_name]
countryName = Country Name (2 letter code)
countryName_default = GB
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = West Midlands
localityName = Locality Name (eg, city)
localityName_default = Birmingham
0.organizationName = Organization Name (eg, company)
0.organizationName_default = WHLB (Certificate Authority)
organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default =
commonName = Common Name (eg, YOUR name)
commonName_default = WHLB (Certificate Authority)
commonName_max = 64
emailAddress = Email Address
emailAddress_max = 64
[v3_ca]
#basicConstraints = critical, CA:true, pathlen:0
basicConstraints = CA:true
#nsCertType = sslCA
#keyUsage = cRLSign, keyCertSign
#extendedKeyUsage = serverAuth, clientAuth
nsComment = "OpenSSL CA Certificate"
crlDistributionPoints =
URI:http://dallas.sifytech.com/SIFY_ca/crl/SIFY_CA.crl
[v3_req]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
crlDistributionPoints =
URI:http://dallas.sifytech.com/SIFY_ca/crl/SIFY_CA.crl
[ca_cert]
basicConstraints = CA:true
nsComment = "OpenSSL Generated Certificate"
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid, issuer:always
extendedKeyUsage = serverAuth, clientAuth
crlDistributionPoints =
URI:https://dallas.sifytech.com/SIFY_ca/crl/SIFY_CA.crl
subjectAltName =
DNS:sifytech.com,DNS:www.sifytech.com;DNS:*.sifytech.com,mail.intensify.com,owa.sifytech.com
What could be wrong? Did I miss anything here? Help me out?
--
View this message in context: http://openssl.6102.n7.nabble.com/error-02001002-system-library-fopen-No-such-file-or-directory-crypto-bio-bss-file-c-tp56325.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
More information about the openssl-users
mailing list