[openssl-users] Issue on Windows Server 2003 Resigning Expired CA certificate

[Jeffrey Walton]

On Fri, Feb 3, 2017 at 12:37 PM, Brandon Shiers
<brandon.shiers at wyoming.com> wrote:
> I have a client that has a CA certificate that has expired.
>
> They are running Windows Server 2003 and OpenSSL 0.9.8d and FreeRadius for
> authentiaction.  Their certificate expired yesterday afternoon and I've been
> trying to get it resigned but I'm getting the following eerrors:
>
> E:\OpenSSL\bin\PEM\demoCA\private>e:\openssl\bin\openssl verify
> e:\openssl\bin\c
> acert.pem
> Error opening certificate file e:\openssl\bin\cacert.pem
> 3964:error:02001002:system library:fopen:No such file or
> directory:.\crypto\bio\
> bss_file.c:352:fopen('e:\openssl\bin\cacert.pem','rb')
> 3964:error:20074002:BIO routines:FILE_CTRL:system
> lib:.\crypto\bio\bss_file.c:35
> 4:
> unable to load certificate

Check the OpenSSL conf file first:
http://stackoverflow.com/q/16658038. You might find the the error is
due to the openssl.cfg file, and not the cacert.pem file.

Jeff