Hi,

I am trying to generate client certificates (to use in internal web/email servers) but the process is aborting.

I can generate the CA OK but when I try to generate the client...

openssl ca -days 365 -out certs/xxxx.crt -in csr/xxx.csr -config

../tls/openssl.cnf
Using configuration from ../tls/openssl.cnf
Enter pass phrase for ../CA/private/cakey.pem:
wrong number of fields on line 1 (looking for field 6, got 1, '' left)

Any ideas?

The openssl.cnf is the one that comes with the distro with the following modification:
--- ../tls/openssl.cnf  2006-06-01 16:29:56.000000000 -0400
+++ ../tls/openssl.cnf.orig 2006-06-01 15:29:15.000000000 -0400
-dir = ../CA # Where everything is kept
+dir = ../../CA # Where everything is kept

Without the modification it simply complains about a missing file.