Unable to load config info from /usr/local/ssl/openssl.cnf on Windows

前端 未结 14 679
无人及你
无人及你 2020-12-12 10:51

While using OpenSSL on Windows:

openssl genrsa -out privatekey.pem 1024 -->

Created successfully

openssl req -new -x509 -key          


        
14条回答
  •  甜味超标
    2020-12-12 11:17

    The only thing that worked for me in this situation was the self-created openssl.cnf file.

    Here are the basics needed for this exercise (edit as needed):

    #
    # OpenSSL configuration file.
    #
    
    # Establish working directory.
    
    dir                         = .
    
    [ ca ]
    default_ca                  = CA_default
    
    [ CA_default ]
    serial                      = $dir/serial
    database                    = $dir/certindex.txt
    new_certs_dir               = $dir/certs
    certificate                 = $dir/cacert.pem
    private_key                 = $dir/private/cakey.pem
    default_days                = 365
    default_md                  = md5
    preserve                    = no
    email_in_dn                 = no
    nameopt                     = default_ca
    certopt                     = default_ca
    policy                      = policy_match
    
    [ policy_match ]
    countryName                 = match
    stateOrProvinceName         = match
    organizationName            = match
    organizationalUnitName      = optional
    commonName                  = supplied
    emailAddress                = optional
    
    [ req ]
    default_bits                = 1024          # Size of keys
    default_keyfile             = key.pem       # name of generated keys
    default_md                  = md5               # message digest algorithm
    string_mask                 = nombstr       # permitted characters
    distinguished_name          = req_distinguished_name
    req_extensions              = v3_req
    
    [ req_distinguished_name ]
    # Variable name             Prompt string
    #-------------------------    ----------------------------------
    0.organizationName          = Organization Name (company)
    organizationalUnitName      = Organizational Unit Name (department, division)
    emailAddress                = Email Address
    emailAddress_max            = 40
    localityName                = Locality Name (city, district)
    stateOrProvinceName         = State or Province Name (full name)
    countryName                 = Country Name (2 letter code)
    countryName_min             = 2
    countryName_max             = 2
    commonName                  = Common Name (hostname, IP, or your name)
    commonName_max              = 64
    
    # Default values for the above, for consistency and less typing.
    # Variable name             Value
    #------------------------     ------------------------------
    0.organizationName_default  = My Company
    localityName_default        = My Town
    stateOrProvinceName_default = State or Providence
    countryName_default         = US
    
    [ v3_ca ]
    basicConstraints            = CA:TRUE
    subjectKeyIdentifier        = hash
    authorityKeyIdentifier      = keyid:always,issuer:always
    
    [ v3_req ]
    basicConstraints            = CA:FALSE
    subjectKeyIdentifier        = hash
    

    I hope that helps.

提交回复
热议问题