Hi,

I am trying to generate client certificates (to use in internal web/email servers) but the process is aborting.

I can generate the CA OK but when I try to generate the client...

openssl ca -days 365 -out certs/xxxx.crt -in csr/xxx.csr -config ../tls/openssl.cnf Using configuration from ../tls/openssl.cnf Enter pass phrase for ../CA/private/cakey.pem: wrong number of fields on line 1 (looking for field 6, got 1, '' left)

Any ideas?

The openssl.cnf is the one that comes with the distro with the following modification:

--- ../tls/openssl.cnf 2006-06-01 16:29:56.000000000 -0400 +++ ../tls/openssl.cnf.orig 2006-06-01 15:29:15.000000000 -0400

-dir = ../CA # Where everything is kept +dir = ../../CA # Where everything is kept

Without the modification it simply complains about a missing file.