Error while try to generate certificate!

[Kwok Sianbin]

Hi All,
 
 I have problem generating client certificate for Windows Xp.
 
 # make client.pem
 openssl req -new  -out client.csr -keyout client.key -config ./client.cnf
 Generating a 2048 bit RSA private key
 ...................................................................+++
 .......+++
 writing new private key to 'client.key'
 -----
 openssl ca -batch -keyfile server.key -cert server.crt -in client.csr  -key `grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf
 Using configuration from ./client.cnf
 unable to load certificate
 4773:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:632:Expecting: TRUSTED CERTIFICATE
 make: *** [client.crt] Error 1
 
 I looked in client.cnf and I could not figure out where got wrong!
 
       
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080519/dbee80f6/attachment.html>