run ./CA.all

 
                ##################
                create private key
                name : name-root
                CA.pl -newcert
                ##################
 
Generating a 1024 bit RSA private key
...........++++++
..................++++++
writing new private key to 'newreq.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:Beijing
Locality Name (eg, city) []:Beijing
Organization Name (eg, company) [Internet Widgits Pty Ltd]:OpenTide
Organizational Unit Name (eg, section) []:IT Solution
Common Name (eg, YOUR name) []:wanghao
Email Address []:wanghao@opentide.com.cn
 
                ##################
                create CA
                use just created 'newreq.pem' private key as filename
                CA.pl -newca
                ##################
 
CA certificate filename (or enter to create)
 
                ##################
                exporting ROOT CA
                CA.pl -newreq
                CA.pl -signreq
                openssl pkcs12 -export -in demoCA/cacert.pem -inkey newreq.pem -out root.pem
                openssl pkcs12 -in root.cer -out root.pem
                ##################
 
MAC verified OK
 
                ##################
                creating client certificate
                name : name-clt
                client certificate stored as cert-clt.pem
                CA.pl -newreq
                CA.pl -signreq
                ##################
 
Generating a 1024 bit RSA private key
..................++++++
..........................++++++
writing new private key to 'newreq.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:Beijing
Locality Name (eg, city) []:Beijing
Organization Name (eg, company) [Internet Widgits Pty Ltd]:OpenTide
Organizational Unit Name (eg, section) []:IT Solution
Common Name (eg, YOUR name) []:wanghao
Email Address []:wanghao@opentide.com.cn
 
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:whatever
An optional company name []:radius
Using configuration from /usr/local/openssl/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:
./demoCA/serial: No such file or directory
error while loading serial number
4427:error:02001002:system library:fopen:No such file or directory:bss_file.c:349:fopen('./demoCA/serial','r')
4427:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:351:
No certificate matches private key
4429:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:150:
unable to load certificate
4430:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:644:Expecting: TRUSTED CERTIFICATE
 
                ##################
                creating server certificate
                name : name-srv
                server certificate stored as cert-srv.pem
                CA.pl -newreq
                CA.pl -signreq
                ##################
 
Generating a 1024 bit RSA private key
..............................++++++
..........++++++
writing new private key to 'newreq.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
