CONF_load_bio:missing equal sign

[Harvey, Jody]

I am currently setting up Open SSL on a Windows 2k system. I have followed
instructions as closely as possible. My problem is when I use this command:

C:\Program Files\GnuWin32\bin>openssl req -config ssl.conf -newkey rsa:1024
-key
out keyreq\server.pf.key -out keyreq\req.pem

I get this:
error on line 28 of ssl.conf
1100:error:0E066065:configuration file routines:CONF_load_bio:missing equal
sign
:conf_def.c:366:line 28

I have no clue what is wrong with the conf file. These seems to be nothing
out of place. I have looked at the FAQs on the OPenSSL site...no help. Can
someone explain or lead me in the right direction? What am I doing wrong?

Jody Harvey
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openss...@openssl.org
Automated List Manager majo...@openssl.org

[PAILLETTE Frédéric]

Hi,

The problem seems to be in your configuration file.
Verify you ssl.conf file. Perhaps that a comment do not start with # and=20
the program interpret it like an affectation without equal sign.
Or a equal sign has been "involuntary" replaced. The mistake is possible.
Example:
"encrypt_rsa_key no" instead of "encrypt_rsa_key =3D=
no"

Hope this help

Fr=E9d=E9ric.

Harvey, Jody wrote:

>I am currently setting up Open SSL on a Windows 2k system. I have follow=
ed
>instructions as closely as possible. My problem is when I use this comma=
nd:
>
>C:\Program Files\GnuWin32\bin>openssl req -config ssl.conf -newkey rsa:1=

024
>-key
>out keyreq\server.pf.key -out keyreq\req.pem
>
>I get this:
>error on line 28 of ssl.conf

>1100:error:0E066065:configuration file routines:CONF_load_bio:missing eq=

ual
>sign
>:conf_def.c:366:line 28
>

>I have no clue what is wrong with the conf file. These seems to be nothi=
ng
>out of place. I have looked at the FAQs on the OPenSSL site...no help. C=
an
>someone explain or lead me in the right direction? What am I doing wrong=

?
>
>Jody Harvey
>______________________________________________________________________
>OpenSSL Project http://www.openssl.org
>User Support Mailing List openss...@openssl.org
>Automated List Manager majo...@openssl.org
>
>
>

> =20

[Harvey, Jody]

Here is line 28 thur 30 of my ssl.conf

SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
#SSLRandomSeed startup file:/dev/random 512

Is that right?

Jody Harvey

-----Original Message-----
From: owner-ope...@openssl.org
[mailto:owner-ope...@openssl.org] On Behalf Of PAILLETTE =
Fr=E9d=E9ric
Sent: Wednesday, February 23, 2005 9:47 AM
To: openss...@openssl.org
Subject: Re: CONF_load_bio:missing equal sign

Hi,

The problem seems to be in your configuration file.

Verify you ssl.conf file. Perhaps that a comment do not start with # =
and=20
the program interpret it like an affectation without equal sign. Or a =

equal
sign has been "involuntary" replaced. The mistake is possible.
Example:
"encrypt_rsa_key no" instead of "encrypt_rsa_key =

=3D no"

Hope this help

Fr=E9d=E9ric.

Harvey, Jody wrote:

>I am currently setting up Open SSL on a Windows 2k system. I have=20
>followed instructions as closely as possible. My problem is when I use =

>this command:
>
>C:\Program Files\GnuWin32\bin>openssl req -config ssl.conf -newkey=20
>rsa:1024 -key out keyreq\server.pf.key -out keyreq\req.pem

>
>I get this:
>error on line 28 of ssl.conf

>1100:error:0E066065:configuration file routines:CONF_load_bio:missing=20
>equal sign :conf_def.c:366:line 28
>
>I have no clue what is wrong with the conf file. These seems to be=20
>nothing out of place. I have looked at the FAQs on the OPenSSL=20
>site...no help. Can someone explain or lead me in the right direction? =

>What am I doing wrong?
>

>Jody Harvey=20

[Charles B Cranston]

Sigh. The diagnostic is clearly pointing at line 28 of the ssl.conf
file - do you think you could post (some context around) line 28 of
your ssl.conf file?

Harvey, Jody wrote:
> I am currently setting up Open SSL on a Windows 2k system. I have followed
> instructions as closely as possible. My problem is when I use this command:
>
> C:\Program Files\GnuWin32\bin>openssl req -config ssl.conf -newkey rsa:1024

> -key
> out keyreq\server.pf.key -out keyreq\req.pem
>
> I get this:
> error on line 28 of ssl.conf

> 1100:error:0E066065:configuration file routines:CONF_load_bio:missing equal

> sign
> :conf_def.c:366:line 28
>

> I have no clue what is wrong with the conf file. These seems to be nothing
> out of place. I have looked at the FAQs on the OPenSSL site...no help. Can
> someone explain or lead me in the right direction? What am I doing wrong?
>
> Jody Harvey

> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openss...@openssl.org
> Automated List Manager majo...@openssl.org

--
"An Internet-connected Windows machine is tantamount to
a toddler carrying a baggie of $100 bills down a city street..."

Charles B (Ben) Cranston
mailto: zb...@umd.edu
http://www.wam.umd.edu/~zben

[Charles B Cranston]

AH, that's the problem. Those are not commands for OpenSSL,
those are commands for the Apache daemon and go in your
apache httpd.conf file.

Harvey, Jody wrote:

> Here is line 28 thur 30 of my ssl.conf
>
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> #SSLRandomSeed startup file:/dev/random 512
>
>
> Is that right?
>
> Jody Harvey

--

[Charles B Cranston]

From man req (which is available at www.openssl.org)

RANDFILE

This specifies a filename in which random number seed information
is placed and read from, or an EGD socket (see RAND_egd(3)). It is used
for private key generation.

===

On Unix I've used something as simple as

(date; du) >randomfile

...

RANDFILE randomfile

which just puts something that is always changing (date) and something
that is very difficult to predict for past or future dates (the free
space on the disk) into a file (this is outside the ssl.conf file tho)
but perhaps you could name some Windows log file or something.

We're way past this in Unix now because many Unix systems have
the /dev/random or /dev/urandom devices - and if these are present
OpenSSl doesn't need the RANDFILE.

[Harvey, Jody]

OK. I think I understand. So I did this:

C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
rsa:1024
-keyout server.pf.key -out req.pem

And got:

error on line -1 of openssl.conf
3700:error:02001002:system library:fopen:No such file or
directory:bss_file.c:10
4:fopen('openssl.conf','rb')
3700:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:
3700:error:0E064072:configuration file routines:CONF_load:no such
file:conf_def.
c:197:

I am doing this on a Win2K server (not by my own choice).

Jody Harvey

-----Original Message-----
From: owner-ope...@openssl.org
[mailto:owner-ope...@openssl.org] On Behalf Of Charles B Cranston
Sent: Wednesday, February 23, 2005 10:11 AM
To: openss...@openssl.org
Subject: Re: CONF_load_bio:missing equal sign

AH, that's the problem. Those are not commands for OpenSSL, those are
commands for the Apache daemon and go in your apache httpd.conf file.

Harvey, Jody wrote:

> Here is line 28 thur 30 of my ssl.conf
>
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> #SSLRandomSeed startup file:/dev/random 512
>
>
> Is that right?
>
> Jody Harvey

--

[PAILLETTE Frédéric]

This is a multi-part message in MIME format.
--------------080300070501080606050507
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

(re)Hi,
Did you have a valid configuration file ?
Try the default file provided by the OpenSSL attached to this mail.
Be aware this file is named openssl.cnf ;-)

Hope this help

Fr=E9d=E9ric

PS: Sorry for my bad english :-)

Harvey, Jody wrote:

>OK. I think I understand. So I did this:
>
>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
>rsa:1024
>-keyout server.pf.key -out req.pem
>
>And got:
>
>error on line -1 of openssl.conf
>3700:error:02001002:system library:fopen:No such file or
>directory:bss_file.c:10
>4:fopen('openssl.conf','rb')

>3700:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:10=

7:
>3700:error:0E064072:configuration file routines:CONF_load:no such
>file:conf_def.
>c:197:
>
>I am doing this on a Win2K server (not by my own choice).
>
>Jody Harvey
>
>
>-----Original Message-----
>From: owner-ope...@openssl.org
>[mailto:owner-ope...@openssl.org] On Behalf Of Charles B Cranston
>Sent: Wednesday, February 23, 2005 10:11 AM
>To: openss...@openssl.org
>Subject: Re: CONF_load_bio:missing equal sign
>
>
>AH, that's the problem. Those are not commands for OpenSSL, those are
>commands for the Apache daemon and go in your apache httpd.conf file.
>
>Harvey, Jody wrote:
>

> =20

>
>>Here is line 28 thur 30 of my ssl.conf
>>
>>SSLRandomSeed startup builtin
>>SSLRandomSeed connect builtin
>>#SSLRandomSeed startup file:/dev/random 512
>>
>>
>>Is that right?
>>
>>Jody Harvey

>> =20
>>
>
> =20
>

--------------080300070501080606050507
Content-Type: text/plain;
name="openssl.cnf"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="openssl.cnf"

#
# OpenSSL example configuration file.
# This is mostly being used for generation of certificate requests.
#

# This definition stops the following lines choking if HOME isn't
# defined.
HOME = .
RANDFILE = $ENV::HOME/.rnd

# Extra OBJECT IDENTIFIER info:
#oid_file = $ENV::HOME/.oid
oid_section = new_oids

# To use this configuration file with the "-extfile" option of the
# "openssl x509" utility, name here the section containing the
# X.509v3 extensions to use:
# extensions =
# (Alternatively, use a configuration file that has only
# X.509v3 extensions in its main [= default] section.)

[ new_oids ]

# We can add new OIDs in here for use by 'ca' and 'req'.
# Add a simple OID like this:
# testoid1=1.2.3.4
# Or use config file substitution like this:
# testoid2=${testoid1}.5.6

####################################################################
[ ca ]
default_ca = CA_default # The default ca section

####################################################################
[ CA_default ]

dir = ./demoCA # Where everything is kept
certs = $dir/certs # Where the issued certs are kept
crl_dir = $dir/crl # Where the issued crl are kept
database = $dir/index.txt # database index file.
#unique_subject = no # Set to 'no' to allow creation of
# several ctificates with same subject.
new_certs_dir = $dir/newcerts # default place for new certs.

certificate = $dir/cacert.pem # The CA certificate
serial = $dir/serial # The current serial number
#crlnumber = $dir/crlnumber # the current crl number must be
# commented out to leave a V1 CRL
crl = $dir/crl.pem # The current CRL
private_key = $dir/private/cakey.pem# The private key
RANDFILE = $dir/private/.rand # private random number file

x509_extensions = usr_cert # The extentions to add to the cert

# Comment out the following two lines for the "traditional"
# (and highly broken) format.
name_opt = ca_default # Subject Name options
cert_opt = ca_default # Certificate field options

# Extension copying option: use with caution.
# copy_extensions = copy

# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
# so this is commented out by default to leave a V1 CRL.
# crlnumber must also be commented out to leave a V1 CRL.
# crl_extensions = crl_ext

default_days = 365 # how long to certify for
default_crl_days= 30 # how long before next CRL
default_md = md5 # which md to use.
preserve = no # keep passed DN ordering

# A few difference way of specifying how similar the request should look
# For type CA, the listed attributes must be the same, and the optional
# and supplied fields are just that :-)
policy = policy_match

# For the CA policy
[ policy_match ]
countryName = match
stateOrProvinceName = match
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional

# For the 'anything' policy
# At this point in time, you must list all acceptable 'object'
# types.
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional

####################################################################
[ req ]
default_bits = 1024
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert

# Passwords for private keys if not present they will be prompted for
# input_password = secret
# output_password = secret

# This sets a mask for permitted string types. There are several options.
# default: PrintableString, T61String, BMPString.
# pkix : PrintableString, BMPString.
# utf8only: only UTF8Strings.
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
# MASK:XXXX a literal mask value.
# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
# so use this option with caution!
string_mask = nombstr

# req_extensions = v3_req # The extensions to add to a certificate request

[ req_distinguished_name ]
countryName = Country Name (2 letter code)
countryName_default = AU
countryName_min = 2
countryName_max = 2

stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Some-State

localityName = Locality Name (eg, city)

0.organizationName = Organization Name (eg, company)
0.organizationName_default = Internet Widgits Pty Ltd

# we can do this but it is not needed normally :-)
#1.organizationName = Second Organization Name (eg, company)
#1.organizationName_default = World Wide Web Pty Ltd

organizationalUnitName = Organizational Unit Name (eg, section)
#organizationalUnitName_default =

commonName = Common Name (eg, YOUR name)
commonName_max = 64

emailAddress = Email Address
emailAddress_max = 64

# SET-ex3 = SET extension number 3

[ req_attributes ]
challengePassword = A challenge password
challengePassword_min = 4
challengePassword_max = 20

unstructuredName = An optional company name

[ usr_cert ]

# These extensions are added when 'ca' signs a request.

# This goes against PKIX guidelines but some CAs do it and some software
# requires this to avoid interpreting an end user certificate as a CA.

basicConstraints=CA:FALSE

# Here are some examples of the usage of nsCertType. If it is omitted
# the certificate can be used for anything *except* object signing.

# This is OK for an SSL server.
# nsCertType = server

# For an object signing certificate this would be used.
# nsCertType = objsign

# For normal client use this is typical
# nsCertType = client, email

# and for everything including object signing:
# nsCertType = client, email, objsign

# This is typical in keyUsage for a client certificate.
# keyUsage = nonRepudiation, digitalSignature, keyEncipherment

# This will be displayed in Netscape's comment listbox.
nsComment = "OpenSSL Generated Certificate"

# PKIX recommendations harmless if included in all certificates.
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer:always

# This stuff is for subjectAltName and issuerAltname.
# Import the email address.
# subjectAltName=email:copy
# An alternative to produce certificates that aren't
# deprecated according to PKIX.
# subjectAltName=email:move

# Copy subject details
# issuerAltName=issuer:copy

#nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
#nsBaseUrl
#nsRevocationUrl
#nsRenewalUrl
#nsCaPolicyUrl
#nsSslServerName

[ v3_req ]

# Extensions to add to a certificate request

basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment

[ v3_ca ]

# Extensions for a typical CA

# PKIX recommendation.

subjectKeyIdentifier=hash

authorityKeyIdentifier=keyid:always,issuer:always

# This is what PKIX recommends but some broken software chokes on critical
# extensions.
#basicConstraints = critical,CA:true
# So we do this instead.
basicConstraints = CA:true

# Key usage: this is typical for a CA certificate. However since it will
# prevent it being used as an test self-signed certificate it is best
# left out by default.
# keyUsage = cRLSign, keyCertSign

# Some might want this also
# nsCertType = sslCA, emailCA

# Include email address in subject alt name: another PKIX recommendation
# subjectAltName=email:copy
# Copy issuer details
# issuerAltName=issuer:copy

# DER hex encoding of an extension: beware experts only!
# obj=DER:02:03
# Where 'obj' is a standard or added object
# You can even override a supported extension:
# basicConstraints= critical, DER:30:03:01:01:FF

[ crl_ext ]

# CRL extensions.
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.

# issuerAltName=issuer:copy
authorityKeyIdentifier=keyid:always,issuer:always

--------------080300070501080606050507--

[Harvey, Jody]

I used the file you sent. Now I am getting:

INPUT

C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
rsa:1024
-keyout server.pf.key -out req.pem

OUPUT

error on line -1 of openssl.conf

2352:error:02001002:system library:fopen:No such file or

directory:bss_file.c:10
4:fopen('openssl.conf','rb')

2352:error:2006D080:BIO routines:BIO_new_file:no such =
file:bss_file.c:107:
2352:error:0E064072:configuration file routines:CONF_load:no such
file:conf_def.
c:197:

Jody Harvey, MCP
AFMIC - Publishing
BAE Systems

-----Original Message-----
From: owner-ope...@openssl.org
[mailto:owner-ope...@openssl.org] On Behalf Of PAILLETTE =
Fr=E9d=E9ric
Sent: Wednesday, February 23, 2005 10:57 AM
To: openss...@openssl.org
Subject: Re: CONF_load_bio:missing equal sign

(re)Hi,
Did you have a valid configuration file ?

Try the default file provided by the OpenSSL attached to this mail. Be =

aware
this file is named openssl.cnf ;-)

Hope this help

Fr=E9d=E9ric

PS: Sorry for my bad english :-)

Harvey, Jody wrote:

>OK. I think I understand. So I did this:
>

>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey =

>rsa:1024 -keyout server.pf.key -out req.pem
>
>And got:
>
>error on line -1 of openssl.conf

>3700:error:02001002:system library:fopen:No such file or=20

>directory:bss_file.c:10
>4:fopen('openssl.conf','rb')

>3700:error:2006D080:BIO routines:BIO_new_file:no such=20
>file:bss_file.c:107: 3700:error:0E064072:configuration file=20

>routines:CONF_load:no such file:conf_def.
>c:197:
>
>I am doing this on a Win2K server (not by my own choice).
>
>Jody Harvey
>
>
>-----Original Message-----
>From: owner-ope...@openssl.org=20
>[mailto:owner-ope...@openssl.org] On Behalf Of Charles B=20
>Cranston
>Sent: Wednesday, February 23, 2005 10:11 AM
>To: openss...@openssl.org
>Subject: Re: CONF_load_bio:missing equal sign
>
>

>AH, that's the problem. Those are not commands for OpenSSL, those are =

>commands for the Apache daemon and go in your apache httpd.conf file.
>
>Harvey, Jody wrote:
>
> =20
>
>>Here is line 28 thur 30 of my ssl.conf
>>
>>SSLRandomSeed startup builtin
>>SSLRandomSeed connect builtin
>>#SSLRandomSeed startup file:/dev/random 512
>>
>>
>>Is that right?
>>
>>Jody Harvey
>> =20
>>
>
> =20
>

[PAILLETTE Frédéric]

Yes, filename error, try the next command ;-)=20

openssl req -config openssl.cnf -newkey rsa:1024 -keyout server.pf.key -o=
ut req.pem

Indeed, the file is named openssl.cnf and not openssl.conf.

Sorry, I can't rename this file easily under winXP, it interpret the=20
extension so I must do it via a command prompt (that is irritating...)

Hope this help.

Frederic

Harvey, Jody wrote:

>I used the file you sent. Now I am getting:
>
>INPUT
>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
>rsa:1024
>-keyout server.pf.key -out req.pem
>
>OUPUT
>error on line -1 of openssl.conf
>2352:error:02001002:system library:fopen:No such file or
>directory:bss_file.c:10
>4:fopen('openssl.conf','rb')

>2352:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:10=

7:
>2352:error:0E064072:configuration file routines:CONF_load:no such
>file:conf_def.
>c:197:
>
>Jody Harvey, MCP
>AFMIC - Publishing
>BAE Systems
>
>
>-----Original Message-----
>From: owner-ope...@openssl.org
>[mailto:owner-ope...@openssl.org] On Behalf Of PAILLETTE Fr=E9d=E9=
ric
>Sent: Wednesday, February 23, 2005 10:57 AM
>To: openss...@openssl.org
>Subject: Re: CONF_load_bio:missing equal sign
>
>
>(re)Hi,
>Did you have a valid configuration file ?

>Try the default file provided by the OpenSSL attached to this mail. Be a=

ware
>this file is named openssl.cnf ;-)
>
>Hope this help
>
>Fr=E9d=E9ric
>
>PS: Sorry for my bad english :-)
>
>Harvey, Jody wrote:
>

> =20

>
>>OK. I think I understand. So I did this:
>>

>>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey=20

>>rsa:1024 -keyout server.pf.key -out req.pem
>>
>>And got:
>>
>>error on line -1 of openssl.conf
>>3700:error:02001002:system library:fopen:No such file or=20
>>directory:bss_file.c:10
>>4:fopen('openssl.conf','rb')
>>3700:error:2006D080:BIO routines:BIO_new_file:no such=20
>>file:bss_file.c:107: 3700:error:0E064072:configuration file=20
>>routines:CONF_load:no such file:conf_def.
>>c:197:
>>
>>I am doing this on a Win2K server (not by my own choice).
>>
>>Jody Harvey
>>
>>
>>-----Original Message-----
>>From: owner-ope...@openssl.org=20
>>[mailto:owner-ope...@openssl.org] On Behalf Of Charles B=20
>>Cranston
>>Sent: Wednesday, February 23, 2005 10:11 AM
>>To: openss...@openssl.org
>>Subject: Re: CONF_load_bio:missing equal sign
>>
>>

>>AH, that's the problem. Those are not commands for OpenSSL, those are=20

[Charles B Cranston]

It's not seeing your openssl.conf file - are you sure it is in
the right place and that you are correctly pointing to it?
The reason I ask is that it was finding it before, so what did
you change to make it not find it now?

Harvey, Jody wrote:

> I used the file you sent. Now I am getting:
>
> INPUT
> C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
> rsa:1024
> -keyout server.pf.key -out req.pem
>
> OUPUT
> error on line -1 of openssl.conf
> 2352:error:02001002:system library:fopen:No such file or
> directory:bss_file.c:10

No such file or directory

> 4:fopen('openssl.conf','rb')

> 2352:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:

> 2352:error:0E064072:configuration file routines:CONF_load:no such
> file:conf_def.
> c:197:
>
> Jody Harvey, MCP
> AFMIC - Publishing
> BAE Systems
>
>
> -----Original Message-----
> From: owner-ope...@openssl.org
> [mailto:owner-ope...@openssl.org] On Behalf Of PAILLETTE Frédéric
> Sent: Wednesday, February 23, 2005 10:57 AM
> To: openss...@openssl.org
> Subject: Re: CONF_load_bio:missing equal sign
>
>
> (re)Hi,
> Did you have a valid configuration file ?

> Try the default file provided by the OpenSSL attached to this mail. Be aware

> this file is named openssl.cnf ;-)
>
> Hope this help
>

> Frédéric

>
> PS: Sorry for my bad english :-)
>
> Harvey, Jody wrote:
>
>
>>OK. I think I understand. So I did this:
>>

>>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
>>rsa:1024 -keyout server.pf.key -out req.pem
>>

>>And got:
>>
>>error on line -1 of openssl.conf

>>3700:error:02001002:system library:fopen:No such file or

>>directory:bss_file.c:10
>>4:fopen('openssl.conf','rb')

>>3700:error:2006D080:BIO routines:BIO_new_file:no such

>>file:bss_file.c:107: 3700:error:0E064072:configuration file

>>routines:CONF_load:no such file:conf_def.
>>c:197:
>>

>>I am doing this on a Win2K server (not by my own choice).
>>
>>Jody Harvey
>>
>>
>>-----Original Message-----
>>From: owner-ope...@openssl.org
>>[mailto:owner-ope...@openssl.org] On Behalf Of Charles B
>>Cranston
>>Sent: Wednesday, February 23, 2005 10:11 AM
>>To: openss...@openssl.org
>>Subject: Re: CONF_load_bio:missing equal sign
>>
>>
>>AH, that's the problem. Those are not commands for OpenSSL, those are

>>commands for the Apache daemon and go in your apache httpd.conf file.
>>
>>Harvey, Jody wrote:
>>
>>
>>
>>
>>>Here is line 28 thur 30 of my ssl.conf
>>>
>>>SSLRandomSeed startup builtin
>>>SSLRandomSeed connect builtin
>>>#SSLRandomSeed startup file:/dev/random 512
>>>
>>>
>>>Is that right?
>>>
>>>Jody Harvey
>>>
>>>
>>
>>
>>
>

> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openss...@openssl.org
> Automated List Manager majo...@openssl.org

--

"An Internet-connected Windows machine is tantamount to
a toddler carrying a baggie of $100 bills down a city street..."

Charles B (Ben) Cranston
mailto: zb...@umd.edu
http://www.wam.umd.edu/~zben

______________________________________________________________________

[Charles B Cranston]

So is the problem that she has an old distro, or that she is not
asking for it correctly, or that she should not be asking at all
(that is, those SSL directives should just be removed and nothing
put in their place)?

Sorry, I don't do any work with Windows so I don't know.

Bernhard Froehlich wrote:

> Charles B Cranston wrote:
>
>> [...]

>> but perhaps you could name some Windows log file or something.
>>
>> We're way past this in Unix now because many Unix systems have
>> the /dev/random or /dev/urandom devices - and if these are present
>> OpenSSl doesn't need the RANDFILE.
>
>

> Not that I'm a real big fan of Bill, but for technical correctness I'd
> repeat myself that current versions of Windows (2000 and later Service
> Packs of NT4, and even CE 2.1, if you're lucky) also have an equivalent
> (? at least I guess so) source of random, and openssl even uses it!
>
> See
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/seccrypto/security/cryptgenrandom.asp
>
>
> Ted
> ;)

[Harvey, Jody]

Thank you Frederic.... It worked! Thanks to all that cared!

Jody Harvey, MCP
AFMIC - Publishing
BAE Systems

-----Original Message-----
From: owner-ope...@openssl.org
[mailto:owner-ope...@openssl.org] On Behalf Of PAILLETTE =
Fr=E9d=E9ric
Sent: Wednesday, February 23, 2005 12:29 PM
To: openss...@openssl.org
Subject: Re: CONF_load_bio:missing equal sign

Yes, filename error, try the next command ;-)=20

openssl req -config openssl.cnf -newkey rsa:1024 -keyout server.pf.key =
-out
req.pem

Indeed, the file is named openssl.cnf and not openssl.conf.

Sorry, I can't rename this file easily under winXP, it interpret the=20
extension so I must do it via a command prompt (that is irritating...)

Hope this help.

Frederic

Harvey, Jody wrote:

>I used the file you sent. Now I am getting:
>
>INPUT
>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf -newkey
>rsa:1024 -keyout server.pf.key -out req.pem
>
>OUPUT
>error on line -1 of openssl.conf
>2352:error:02001002:system library:fopen:No such file or
>directory:bss_file.c:10

>4:fopen('openssl.conf','rb')

>2352:error:2006D080:BIO routines:BIO_new_file:no such=20
>file:bss_file.c:107: 2352:error:0E064072:configuration file=20

>routines:CONF_load:no such file:conf_def.
>c:197:
>
>Jody Harvey, MCP
>AFMIC - Publishing
>BAE Systems
>
>
>-----Original Message-----
>From: owner-ope...@openssl.org
>[mailto:owner-ope...@openssl.org] On Behalf Of PAILLETTE=20
>Fr=E9d=E9ric
>Sent: Wednesday, February 23, 2005 10:57 AM
>To: openss...@openssl.org
>Subject: Re: CONF_load_bio:missing equal sign
>
>
>(re)Hi,
>Did you have a valid configuration file ?
>Try the default file provided by the OpenSSL attached to this mail. Be
>aware this file is named openssl.cnf ;-)
>
>Hope this help
>

>Fr=E9d=E9ric

>
>PS: Sorry for my bad english :-)
>
>Harvey, Jody wrote:
>

> =20

>
>>OK. I think I understand. So I did this:
>>

>>C:\Program Files\GnuWin32\bin>openssl req -config openssl.conf =
-newkey=20

>>rsa:1024 -keyout server.pf.key -out req.pem
>>
>>And got:
>>
>>error on line -1 of openssl.conf

>>3700:error:02001002:system library:fopen:No such file or=20

>>directory:bss_file.c:10
>>4:fopen('openssl.conf','rb')
>>3700:error:2006D080:BIO routines:BIO_new_file:no such

>>file:bss_file.c:107: 3700:error:0E064072:configuration file=20

>>routines:CONF_load:no such file:conf_def.
>>c:197:
>>
>>I am doing this on a Win2K server (not by my own choice).
>>
>>Jody Harvey
>>
>>
>>-----Original Message-----
>>From: owner-ope...@openssl.org=20
>>[mailto:owner-ope...@openssl.org] On Behalf Of Charles B=20
>>Cranston
>>Sent: Wednesday, February 23, 2005 10:11 AM
>>To: openss...@openssl.org
>>Subject: Re: CONF_load_bio:missing equal sign
>>
>>

>>AH, that's the problem. Those are not commands for OpenSSL, those =
are=20

>>commands for the Apache daemon and go in your apache httpd.conf file.
>>
>>Harvey, Jody wrote:
>>

>>=20
>>
>> =20

>>
>>>Here is line 28 thur 30 of my ssl.conf
>>>
>>>SSLRandomSeed startup builtin
>>>SSLRandomSeed connect builtin
>>>#SSLRandomSeed startup file:/dev/random 512
>>>
>>>
>>>Is that right?
>>>
>>>Jody Harvey

>>> =20
>>>
>>> =20
>>>
>>=20
>>
>> =20

>>
>______________________________________________________________________
>OpenSSL Project http://www.openssl.org
>User Support Mailing List openss...@openssl.org
>Automated List Manager majo...@openssl.org
>
>
>
>

> =20