Comments on: OpenSSL Self-Signed CA

By: Axion

Axion — Tue, 22 Jun 2010 03:23:55 +0000

Paul, thanks for the tutorial. This has been by far the biggest help. I am running into one issue however. The instructions above require you to create a csr and a key. However, in Exchange 2010 (and 2010), the CSR is created for you by Exchange Server. Is there a way to use the Exchange csr to generate a key? I’m at a standstill as Exchange doesn’t see my cert as valid.

Thanks!

By: satish

satish — Wed, 17 Jun 2009 11:39:55 +0000

hi ,
i am also receiving the same error,
where is the file : certindex file located , i didnt find the file.
pls help me

thanks,
Satish

By: tekion

tekion — Wed, 27 May 2009 22:02:11 +0000

hi, I know you can create a regular self signed certificate without having to roll your own CA and signing the certificate with it. I am wondering you need to roll your CA and signing the SAN certificate request yourself. Can you not just roll a self signed SAN certificate without having to sign it with your custom CA? thanks.

By: Paul Kehrer

Paul Kehrer — Thu, 02 Apr 2009 18:52:10 +0000

This error is caused when your certindex file is not completely empty. Check inside the file and if there is any char (including a space) remove it and save. On linux you can just remove the existing file and touch a new one.

By: Gautham

Gautham — Thu, 02 Apr 2009 12:09:42 +0000

Hi,

I was trying self signed root certificate as per your instructions…

but i got some error when i tried creating certificate using command:

openssl ca -batch -config /Users/gautham/myca.conf -notext -in req.csr -out /Users/gautham/ourdomain.cer

Error:
Using configuration from /Users/gautham/myca.conf
wrong number of fields on line 1 (looking for field 6, got 1, ” left)

Please Reply regarding this if you have any idea..

Thanks and Regards,
Gautham