Posted: 9/18/2015 1:18:34 PM EDT
|
I'm trying to create a PEM key for my Cisco WLC. for the life of me I cannot get OpenSSL to work on a windows. This is the command I'm using
req -new -newkey rsa:2048 -config "C:\Program Files\GnuWin32\share\openssl.cfg" -nodes -keyout mykey.pem -out myreq.pem This is the error I'm getting can any of you help? error on line -1 of C:\Program Files\GnuWin32\share\openssl.cfg 8104:error:02001002:system library:fopen:No such file or directory:./crypto/bio/ bss_file.c:126:fopen('C:\Program Files\GnuWin32\share\openssl.cfg','rb') 8104:error:2006D080:BIO routines:BIO_new_file:no such file:./crypto/bio/bss_file .c:129: 8104:error:0E078072:configuration file routines:DEF_LOAD:no such file:./crypto/c onf/conf_def.c:197: error in req OpenSSL> |
|
First problem fixed had the wrong file extension in the original command now this error pops up. Error adding attribute 2688:error:0D0BA041:asn1 encoding routines:ASN1_STRING_set:malloc failure:./cryp to/asn1/asn1_lib.c:381: 2688:error:0D0CC041:asn1 encoding routines:ASN1_EX_C2I:malloc failure:./crypto/a sn1/tasn_dec.c:1046: 2688:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 e rror:./crypto/asn1/tasn_dec.c:710: 2688:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:./ crypto/asn1/tasn_dec.c:338:Field=value.set, Type=X509_ATTRIBUTE 2688:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 e rror:./crypto/asn1/tasn_dec.c:749:Field=, Type=X509_ATTRIBUTE problems making Certificate Request error in req OpenSSL> |
|
openssl either isnt installed correctly or configured correctly
malloc error is odd in this case though. get some live linux or something run it in a VM and create them that way. theres tons of step by step stuff on linux for doing this. unfortunately, this stuff is a mess. i mean a real mess. tons of different formats, and options of signing a pem or encrypting one, etc etc/ some applications require you to handle it exactly in a specific way. to make things worse, theres really no 'standard' way of referring to some of the types. its a mess. ive done ssl for probably 15 different types of applications, they all differ in some manner. its a mess. hell java even has their own 'flavor' 
|