[Openswan Users] Problem with openssl ca

Paul Wouters paul at xelerance.com
Wed Dec 14 19:18:36 CET 2005

On Wed, 14 Dec 2005, Nick Norman wrote:

> All appears to be Ok all installed, run CA.sh -new ca appears to run OK, but
> when I issue openssl ca -gencrl -out crl.pem I get an error saying that there
> is no cacert.pem, this is correct one has not been written.
> So the question is - what am I missing?

Have a look at http://www.natecarlson.com/linux/ipsec-x509.php#casetup

check your openccl.cnf for filepaths where it has put your CA certificate.
If you use any non-standard path, you need to specify if for each command,
using with the -in option.


More information about the Users mailing list