Generating Certifcates (Using CVS bootstrap)
Is there anything I am doing wrong? I try to make some certificates but it fails. [root@fedora certs]# rm -f *.pem *.der *.csr *.crt *.key *.p12 serial* index.txt* [root@fedora certs]# ./bootstrap : octal number out of range: 027 : No such file or directory openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private key .................+++ ...+++ writing new private key to 'ca.key' ----- openssl req -new -out server.csr -keyout server.key -config ./server.cnf Generating a 2048 bit RSA private key ..+++ .+++ writing new private key to 'server.key' ----- openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf Using configuration from ./server.cnf unable to load CA private key 2886:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:461: 2886:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425: make: *** [server.crt] Error 1 -- View this message in context: http://www.nabble.com/Generating-Certifcates-%28Using-CVS-bootstrap%29-tf493... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Dead6re wrote:
Is there anything I am doing wrong? I try to make some certificates but it fails.
Run the OpenSSL commands by hand. They are one-line entries in raddb/certs/Makefile. ...
unable to load CA private key 2886:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:461: 2886:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425: make: *** [server.crt] Error 1
The passwords are likely wrong. Are you using fancy characters, or just text for the passwords? Alan DeKok.
Running the OpenSSL commands by hand worked, seemed the paths weren't picking up correctly or something. Now I've got the mschap problem as discussed in the last edit. Alan DeKok-4 wrote:
Dead6re wrote:
Is there anything I am doing wrong? I try to make some certificates but it fails.
Run the OpenSSL commands by hand. They are one-line entries in raddb/certs/Makefile.
...
unable to load CA private key 2886:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:461: 2886:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425: make: *** [server.crt] Error 1
The passwords are likely wrong. Are you using fancy characters, or just text for the passwords?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/MSCHAP-NTLM_AUTH-tf4935086.html#a14129414 Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (2)
-
Alan DeKok -
Dead6re