<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.14.1">
</HEAD>
<BODY>
On Thu, 2007-09-06 at 13:56 -0400, Mack Ragan wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">Hi,</FONT>
<FONT COLOR="#000000">Using the provided script "CA.all", trying to create self-signed certs </FONT>
<FONT COLOR="#000000">on a new freeradius box and running into a missing serial file problem. </FONT>
<FONT COLOR="#000000">Executing the commands in the script line-by-line shows that the command </FONT>
<FONT COLOR="#000000">"openssl ca -policy policy_anything -out newcert.pem -passin </FONT>
<FONT COLOR="#000000">pass:whatever -key whatever -extensions xpserver_ext -extfile </FONT>
<FONT COLOR="#000000">xpextensions -infiles newreq.pem" is what is looking for the file </FONT>
<FONT COLOR="#000000">"./demoCA/serial" which does not exist. I think it is normally created </FONT>
<FONT COLOR="#000000">during "CA.pl -newca" but this doesn't appear to happen with the </FONT>
<FONT COLOR="#000000">script's command of "echo "newreq.pem" | /usr/local/ssl/misc/CA.pl </FONT>
<FONT COLOR="#000000">-newca". I'm using OpenSSL version 0.9.8e. Anyone have this experience?</FONT>
<FONT COLOR="#000000">Thanks!</FONT>
<FONT COLOR="#000000">-</FONT>
<FONT COLOR="#000000">List info/subscribe/unsubscribe? See <A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A></FONT>
</PRE>
</BLOCKQUOTE>
<BR>
Check this site out to answer your question<BR>
<BR>
<A HREF="http://www.tc.umn.edu/~brams006/selfsign.html">http://www.tc.umn.edu/~brams006/selfsign.html</A><BR>
<BR>
dutch
</BODY>
</HTML>