Categories:
Android (13)
Apple Mac (27)
DH Keys (39)
DSA Keys (71)
EC Keys (2095)
Firefox (30)
General (10)
Google Chrome (25)
Intermediate CA (152)
Java VM (29)
JDK Keytool (28)
Microsoft CertUtil (29)
Microsoft Edge (9)
Mozilla CertUtil (21)
OpenSSL (236)
Other (7)
Portecle (38)
Publishers (6022)
Revoked Certificates (16)
Root CA (85)
RSA Keys (4917)
Tools (46)
Tutorial (1)
What Is (22)
Windows (127)
Collections:
Other Resources:
OpenSSL "ca" Error "lookup failed for ca::default_md"
Why I am getting the "variable lookup failed for ca::default_md" error when running OpenSSL "ca" command?
✍: FYIcenter.com
You are getting the "variable lookup failed for ca::default_md" error,
because OpenSSL "ca" command can not find the required "default_md" option
in the configuration file.
For example, if you have the follow configuration file, test.cnf, without "default_md" option defined:
# Unnamed section of generic options # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db
You will get an error, because "default_md" is a required option:
C:\Users\fyicenter>\local\OpenSSL-Win32\bin\openssl.exe OpenSSL> ca -in test.csr -keyfile my_ca.key -cert my_ca.crt -config test.cnf Using configuration from test.cnf Enter pass phrase for my_ca.key:fyicenter variable lookup failed for my_ca_default::default_md 5816:error:02001002:system library:fopen:No such file or directory: .\crypto\bio\bss_file.c:175:fopen('./my_ca/certs.db.attr','rb') 5816:error:2006D080:BIO routines:BIO_new_file:no such file: .\crypto\bio\bss_file.c:178: 5816:error:0E078072:configuration file routines:DEF_LOAD:no such file: .\crypto\conf\conf_def.c:195: 5816:error:0E06D06C:configuration file routines:NCONF_get_string:no value: .\crypto\conf\conf_lib.c:324:group=my_ca_default name=default_md error in ca
Fixing this error is easy. Just add the "default_md" option in the section pointed by the "default_ca" option in the configuration file:
# Unnamed section of generic options # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db default_md = md5
"default_md = md5" tells OpenSSL to use MD5 as the message digest algorithm, when generating the digital signature in the certificate.
⇒ OpenSSL "ca" Error "lookup failed for ca::policy"
2016-09-08, 10085👍, 0💬
Popular Posts:
Certificate summary - Owner: USERTrust Legacy Secure Server CA, The USERTRUST Network, L=Salt Lake C...
How to import a certificate as a user-level trusted certificate using Java Control Panel? If you obt...
How to create a new certificate to be used by some Web site for server authentication to support HTT...
Certificate summary - Owner: www.ameba.jp, Ameba Section, Cyber Agent ltd, L=Shibuya-ku Dougenzaka 2...
How to view a CRL in text format using the OpenSSL "crl" command? I want to see what certificates ar...