Hi Mauricio, thank you for your reply. I was doing this on my OpenLDAP 2.4.30 server and thought I would post my questions here as I followed the admin guide from OpenLDAP.org. I've been stuck with this for a while now. Can you let me know what exactly to do with openssl.cnf?Thanks again
Jeevan
Date: Tue, 24 Feb 2015 15:42:22 -0500 Subject: Re: SSL CA Certificate issue ../../CA/newcerts: No such file or directory From: raubvogel@gmail.com To: jeev_biz@hotmail.com CC: openldap-technical@openldap.org
On Tue, Feb 24, 2015 at 3:38 PM, jeevan kc jeev_biz@hotmail.com wrote:
Hi all I'm having trouble with the generation of CA. Please see the error at the bottom and I'd appreciate any help to fix the issue.
[root@lap00551]# mkdir /var/myca/ [root@lap00551]cd/var/myca [root@lap00551 myca]# /usr/local/openssl.1.0.0d/misc/CA.sh -newca CA certificate filename (or enter to create)
Making CA certificate ... Generating a 1024 bit RSA private key .............++++++ ........................++++++ writing new private key to './demoCA/private/./cakey.pem' Enter PEM pass phrase: Verifying - Enter PEM pass phrase:
You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank.
Country Name (2 letter code) [GB]:US State or Province Name (full name) [Berkshire]:**** Locality Name (eg, city) [Newbury]:**** Organization Name (eg, company) [My Company Ltd]:**** Organizational Unit Name (eg, section) []:DIS Common Name (eg, your name or your server's hostname) []:lap00551.**** Email Address []:****
Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []:**** An optional company name []:**** Using configuration from /etc/pki/tls/openssl.cnf Enter pass phrase for ./demoCA/private/./cakey.pem: I am unable to access the ../../CA/newcerts directory ../../CA/newcerts: No such file or directory Regards, Jeevan
I think this might be the wrong mailing list for that. Thatsaid, you probably want to edit openssl.cnf to fit your needs