Hi:
I'm running OpenSSL 0.9.8d on an HP-UX 11 box. In the past I've been
able to generate CSRs and keys via the command line with no trouble.
However, today I generated a key just fine, but when I tried to generate
the CSR it failed. I'm not aware of anything having been changed since
the last CSR I generated (July 2007), but I'm not the administrator of
this box so I wouldn't be privy to all changes.
The command I run is...
--- SNIP ---
../../bin/openssl req -new -config /opt/prodhpws/webmin/acl/openssl.cnf
-key ../ssl.key/my-new-key.key -out my-new-csr.csr
--- SNIP ---
It asks me the standard questions, and then when it's done I get this
error...
--- SNIP ---
28862:error:0E06D06C:configuration file routines:NCONF_get_string:no
value:conf_lib.c:328:group=req_attributes name=unstructuredName_min
28862:error:0E06D06C:configuration file routines:NCONF_get_string:no
value:conf_lib.c:328:group=req_attributes name=unstructuredName_max
28862:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not
seeded:md_rand.c:503:You need to read the OpenSSL FAQ,
http://www.openssl.org/support/faq.html28862:error:04088003:rsa routines:RSA_setup_blinding:BN
lib:rsa_lib.c:407:
28862:error:04066044:rsa routines:RSA_EAY_PRIVATE_ENCRYPT:internal
error:rsa_eay.c:409:
28862:error:0D0C3006:asn1 encoding routines:ASN1_item_sign:EVP
lib:a_sign.c:276:
--- SNIP ---
I'm not even sure where to start debugging this!
TIA.
~ Robert
______________________________________________________________________
OpenSSL Project
http://www.openssl.orgUser Support Mailing List
openssl-users@...
Automated List Manager
majordomo@...