SSL Security

Hi, I've got a problem:

I installed OpenSSL to generate a certificate but when I want to make a request with a command:

-openssl req -new -out REQ.pem -keyout KEY.pem

it results in DOS as:

problems making Certificate Request

4293148761:error:0E06D06A:configuration fileroutines:NCONF_get_string:no conf or

environment variable:.\crypto\conf\conf_lib.c:343:

What can be wrong?

Thank you in advance

[467 byte] By [lujaika] at [2007-9-26 1:40:11]
# 1
Hi, all!I found what was wrong!I only needed to set the configuration file as following:-config c:\openssl-0.9.6\apps\openssl.cnf Now it works.
lujaika at 2007-6-29 2:30:17 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 2
Hey I want to use open ssl to create my own certificate.can u tell me what to download and how to create a certificate.Answer will be valuablethanks, gopal.
gopal_1974 at 2007-6-29 2:30:17 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 3

Hi Gopal,

The OpenSSL req command creates a self-signed certificate when the -x509 switch is used. The certificate is placed in the file CAcert.pem, and the private key in CAkey.pem. This command prompts for the password (e.g. caKEY) for the private key.

$SSLDIR/bin/openssl req -new -x509 -keyout ${SSLDIR}/private/CAkey.pem \

-out ${SSLDIR}/private/CAcert.pem -config /usr/local/ssl/openssl.cnf

Hope this will help you,

Regards,

Anil.

ramanil_indts at 2007-6-29 2:30:17 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 4

Hey Anil,

What do I download ?.

Well once I download I think the command you gave me will help me create a certificate.

But can i have a keystore where i can keep the pub and pri keys.

Can you explain whta is the role of the trust manager and then handshake.

once again answer will be valuable.

Thanks

Gopal.

gopal_1974 at 2007-6-29 2:30:17 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 5

i did the following and encountered errors...what went wrong...?

E:\SSL>openssl ca -config e:\openssl\apps\openssl.cnf -in client.crs -out client.crs.pem -keyfile ca.key

Using configuration from e:\openssl\apps\openssl.cnf

Loading 'screen' into random state - done

./demoCA/cacert.pem: No such file or directory

trying to load CA certificate

1168:error:02001000:system library:fopen:system library:tmp/bss_file.c:245:fopen('./demoCA/cacert.pe

m','rb')

1168:error:20074002:BIO routines:FILE_CTRL:system lib:tmp/bss_file.c:247:

siew_edward at 2007-6-29 2:30:17 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...