[Openswan Users] Problem with openssl ca

[Paul Wouters]

On Wed, 14 Dec 2005, Nick Norman wrote:

> All appears to be Ok all installed, run CA.sh -new ca appears to run OK, but
> when I issue openssl ca -gencrl -out crl.pem I get an error saying that there
> is no cacert.pem, this is correct one has not been written.
>
> So the question is - what am I missing?

Have a look at http://www.natecarlson.com/linux/ipsec-x509.php#casetup

check your openccl.cnf for filepaths where it has put your CA certificate.
If you use any non-standard path, you need to specify if for each command,
using with the -in option.

Paul