Posted comments (3)

Posted by Dan R. at September 9, 2010 21:01:49 CEST
When you generate the root CA, in addition to what is displayed above, you may be asked: Please enter the following 'extra' attributes, such as a "challenge password".

As you may have guessed, you can safely ignore them (just press Enter).
Posted by Sau at March 28, 2011 09:26:17 CEST
when i run "perl -newca", I hit the following error

unable to find 'distinguished_name' in config
problem making certificate request
configuration file routines: NCONF_get_string: no conf or environment variable:.\crypto\conf\conf_lib

Any ideas how to resolve this?
Thank you very much
Posted by Anil Vighne at May 24, 2018 07:50:53 CEST
Vary good tutorial but at step no 4 you may get following type of error.

C:\OpenSSL-Win64\bin>openssl x509 -in demoCA/cacert.pem -days 7300 -out cacert.pem -signkey demoCA/private/cakey.pem
Getting Private key
Enter pass phrase for demoCA/private/cakey.pem:
unable to write 'random state'

If you got this then you need to set following variable in command prompt.

set RANDFILE=.rnd

It will resolve.

Anil Vighne