Reputation: 65
i'm running some scripts to generate some certificates and one of the lines is using openssl and it has the parameter "-extension ssl_server" yet when I run it it gives an error trying to load that extension.
I've googled it, looked through for similar issues on here and for the life of me can't figure out why there is an issue.
the command is:
openssl x509 -req -days 365 -in server.csr -CA cacert.crt -CAkey cakey.key -CAcreateserial -out server.crt -extfile ./server.cnf -extensions ssl_server
and the error:
Error Loading extension section ssl_server
Am running this on an Ubuntu VM in Azure, fresh from the box with no extra config.
Upvotes: 1
Views: 5003
Reputation: 396
run openssl version -a and check the directory value indicated by OPENSSLDIR key. Navigate to the same directory and change the settings in the openssl.cnf, then the extensions will be picked up correctly
Upvotes: 6