<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-"><br>
</span>So what does your certs/demo directory look like? Do you have the<br>
necessary symbolic links (created during "make" somewhere I think).<span class="gmail-HOEnZb"><font color="#888888"><br></font></span></blockquote><div><br></div><div><br></div><div>Links are missing. </div><div><br></div><div>The problem has something to do with the default path to openssl.conf. In my case it is based on the build prefix I used.</div><div>If the path does not exist, make rehash will create links happily.<br></div><div>If the dir exists but my build account does not have access permissions, make rehash is unhappy and refuses to create links.</div><div><br></div><div>rm rehash.time</div><div>make rehash</div><div><br></div><div><div>Doing certs/demo</div><div>140097379800768:error:0200100D:system library:fopen:Permission denied:bss_file.c:175:fopen('/usr/local/.../openssl/ssl/openssl.cnf','rb')</div><div>140097379800768:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:184:</div><div>140097379800768:error:0E078002:configuration file routines:DEF_LOAD:system lib:conf_def.c:203:</div><div>140367544841920:error:0200100D:system library:fopen:Permission denied:bss_file.c:175:fopen('/usr/local/.../openssl/ssl/openssl.cnf','rb')</div><div>140367544841920:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:184:</div><div>140367544841920:error:0E078002:configuration file routines:DEF_LOAD:system lib:conf_def.c:203:</div><div>WARNING: Skipping duplicate certificate dsa-ca.pem</div><div>140697328998080:error:0200100D:system library:fopen:Permission denied:bss_file.c:175:fopen('/usr/local/.../openssl/ssl/openssl.cnf','rb')</div><div>140697328998080:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:184:</div><div>140697328998080:error:0E078002:configuration file routines:DEF_LOAD:system lib:conf_def.c:203:</div><div>WARNING: Skipping duplicate certificate dsa-pca.pem</div><div>139717812614848:error:0200100D:system library:fopen:Permission denied:bss_file.c:175:fopen('/usr/local/.../openssl/ssl/openssl.cnf','rb')</div><div>139717812614848:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:184:</div><div>139717812614848:error:0E078002:configuration file routines:DEF_LOAD:system lib:conf_def.c:203:</div><div>WARNING: Skipping duplicate certificate pca-cert.pem</div></div><div><br></div><div><br></div><div><br></div><div>

<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">I don't know why openssl handles both errors in a different way. In general the build does not care about the inaccessible config. That behavior suits me.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">Maybe the build should detect the problem with make rehash. Or force an OPENSSL_CONF value that will make it happy. Here's the workaround I applied to my build script.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">...</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">rm rehash.time<br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><div>make OPENSSL_CONF= rehash</div><div><br></div><div>make test</div><div><br></div><div><br></div><div>Problem nailed. Thank you for your help! </div><div><br></div></div></div><div> </div></div>-- <br><div class="gmail_signature"><div dir="ltr">Philippe Anctil</div></div>
</div></div>