Categories:
DH Keys (39)
DSA Keys (71)
EC Keys (286)
Firefox (32)
General (13)
Google Chrome (25)
Intermediate CA (152)
Java VM (20)
JDK Keytool (25)
Microsoft CertUtil (26)
Mozilla CertUtil (18)
OpenSSL (237)
Other (17)
Portecle (38)
Publishers (1799)
Revoked Certificates (30)
Root CA (87)
RSA Keys (2058)
Tools (47)
Tutorial (7)
What Is (21)
Windows (129)
Collections:
Other Resources:
OpenSSL "ca" Error "lookup failed for ca::policy"
Why I am getting the "variable lookup failed for ca::policy" error when running OpenSSL "ca" command?
✍: FYIcenter.com
You are getting the "variable lookup failed for ca::policy" error,
because OpenSSL "ca" command can not find the required "policy" option
in the configuration file.
For example, if you have the follow configuration file, test.cnf, without "policy" option defined:
# Unnamed section of generic options # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db default_md = md5
You will get an error, because "policy" is a required option:
C:\Users\fyicenter>\local\OpenSSL-Win32\bin\openssl.exe OpenSSL> ca -in test.csr -keyfile my_ca.key -cert my_ca.crt -config test.cnf Using configuration from test.cnf Enter pass phrase for my_ca.key:fyicenter variable lookup failed for my_ca_default::policy 5816:error:02001002:system library:fopen:No such file or directory: .\crypto\bio\bss_file.c:175:fopen('./my_ca/certs.db.attr','rb') 5816:error:2006D080:BIO routines:BIO_new_file:no such file:.\crypto\bio\bss_file.c:178: 5816:error:0E078072:configuration file routines:DEF_LOAD:no such file: .\crypto\conf\conf_def.c:195: 5816:error:0E06D06C:configuration file routines:NCONF_get_string:no value: .\crypto\conf\conf_lib.c:324:group=my_ca_default name=email_in_dn 5816:error:0E06D06C:configuration file routines:NCONF_get_string:no value: .\crypto\conf\conf_lib.c:324:group=my_ca_default name=policy error in ca
Fixing this error is easy. Just add the "policy" option in the section pointed by the "default_ca" option in the configuration file:
# Unnamed section of generic options # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db default_md = md5 policy = my_ca_policy
Remember to add the [my_ca_policy] section with policy options in the configuration file. Policy options control validation rules.
⇒ OpenSSL "ca" Error "lookup failed for ca::serial"
2016-09-08, 5873👍, 0💬
Popular Posts:
How to export the server certificate to a file in IE? I can view the server certificate used by the ...
What can I use OpenSSL "verify" command for? What are options supported by the "verify" command? Ope...
Certificate Summary: Subject: GeoTrust Primary Certification Authority - G2 Issuer: GeoTrust Primary...
Can I use the "keytool -printcert" command to download the certificate from a Web site? I know the W...
Why I am getting the "Your connection is not secure" error screen in Firefox? You will see the "Your...