Hello there
I'm trying to generate an SSL certificate. This is the process I've been following:
[root@Lobster1 private]# openssl genrsa -out server.key 1024
Generating RSA private key, 1024 bit long modulus
............++++++
......++++++
e is 65537 (0x10001)
[root@Lobster1 private]# chmod 400 server.key
[root@Lobster1 private]# openssl req -new -key server.key -out server.csr
<some questions - no errors>
[root@Lobster1 private]# openssl genrsa -des3 -out ca.key 1024
Generating RSA private key, 1024 bit long modulus
....................++++++
.....++++++
e is 65537 (0x10001)
Enter pass phrase for ca.key:
Verifying - Enter pass phrase for ca.key:
[root@Lobster1 private]# openssl req -new -x509 -days 365 -key ca.key -out ca.csr
<more questions, no errors>
[root@Lobster1 private]# openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt
30075:error:0906D06C:PEM routines:PEM_read_bio:no start line
em_lib.c:632:Expecting: CERTIFICATE REQUEST
And that's the obvious problem. Now I can make it not fail by leaving out the -req switch, but the sign.sh program gives completely odd outputs AND also gives two errors if i do that:
Personally it seems to me that the -req should be in there because the guide i'm working of has it (Apache Essential - D.J. Harkness) in there.
Any ideas on how to fix this? it is on a Mandrake 10.0 (official) version of GNU/Linux with it's September 2003 version of SSL 0.9.3c i think it was (installing a newer version right now).
