topic Re: HAB_IMX6UL in i.MX Processors

HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 04:09:37 GMT

Hii Team ,

I am trying to do secure boot with hab and i have done all the steps from

Encrypted boot loader on SabreSD i.MX6q board

but I stucked at :=

gcc -o cst -I ../hdr -L ../../../linux64/lib *.c -lfrontend -lcrypto

gcc -o cst_encrypt -I ../hdr -L ../../../linux64/lib *.c -lfrontend -lcrypto
/tmp/ccWNF7ae.o: In function `sk_X509_new_null':
adapt_layer_openssl.c:(.text+0x5): undefined reference to `OPENSSL_sk_new_null'
/tmp/ccWNF7ae.o: In function `sk_X509_push':
adapt_layer_openssl.c:(.text+0x2a): undefined reference to `OPENSSL_sk_push'
/tmp/ccWNF7ae.o: In function `sk_X509_pop_free':
adapt_layer_openssl.c:(.text+0x4f): undefined reference to `OPENSSL_sk_pop_free'
/tmp/ccWNF7ae.o: In function `gen_sig_data_ecdsa':
adapt_layer_openssl.c:(.text+0xa4f): undefined reference to `EVP_PKEY_get0_EC_KEY'
adapt_layer_openssl.c:(.text+0xa8d): undefined reference to `EVP_PKEY_get0_EC_KEY'
adapt_layer_openssl.c:(.text+0xbda): undefined reference to `ECDSA_SIG_get0'
/tmp/ccy3RGpA.o: In function `generate_hash':
openssl_helper.c:(.text+0x1f): undefined reference to `EVP_MD_CTX_new'
/tmp/ccy3RGpA.o: In function `sign_data':
openssl_helper.c:(.text+0x4b3): undefined reference to `EVP_MD_CTX_new'
openssl_helper.c:(.text+0x520): undefined reference to `EVP_MD_CTX_free'
openssl_helper.c:(.text+0x5a6): undefined reference to `EVP_MD_CTX_free'
openssl_helper.c:(.text+0x5c5): undefined reference to `EVP_MD_CTX_free'
/tmp/ccy3RGpA.o: In function `ver_sig_data':
openssl_helper.c:(.text+0xc8b): undefined reference to `EVP_PKEY_get0_RSA'
openssl_helper.c:(.text+0xd49): undefined reference to `ECDSA_SIG_set0'
openssl_helper.c:(.text+0xd78): undefined reference to `EVP_PKEY_get0_EC_KEY'
../../../linux64/lib/libfrontend.a(srk_helper.o): In function `srk_entry_pkcs1':
srk_helper.c:(.text+0x90): undefined reference to `EVP_PKEY_get0_RSA'
srk_helper.c:(.text+0xa8): undefined reference to `RSA_get0_key'
../../../linux64/lib/libfrontend.a(srk_helper.o): In function `srk_entry_ec':
srk_helper.c:(.text+0x564): undefined reference to `EVP_PKEY_get0_EC_KEY'
srk_helper.c:(.text+0x5d3): undefined reference to `EVP_PKEY_get0_EC_KEY'
/usr/bin/ld: ../../../linux64/lib/libfrontend.a(err.o): unrecognized relocation (0x2a) in section `.text'
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status
ubuntuforedd@Sachinedd2:~/Downloads/cstool/code/back_end/src$ l
adapt_layer_openssl.c openssl_helper.c pkey.c ssl_wrapper.c

Regards ,

Pramod Kumar

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 04:20:55 GMT

Dear Team ,

One more thing I need to be understand as I am a fresher in Linux environment , My system is of 64 bit but the IMX 6ul machine is of 32 bit . So , give some steps and suggestion to do for the same .

Re: HAB_IMX6UL

Yuri — Thu, 07 Mar 2019 05:31:46 GMT

Hello,

Please refer to app note "Encrypted Boot on HABv4 and CAAM Enabled Devices".

https://www.nxp.com/docs/en/application-note/AN12056.pdf

In particular, look at section 4.2. (Requirements).

Have a great day,

Yuri

------------------------------------------------------------------------------

Note: If this post answers your question, please click the Correct Answer

button. Thank you!

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 06:21:59 GMT

hii Yuri ,

In-between compilation I am facing below issue :

$ gcc -o cst -I ../hdr -L ../../../linux32/lib *.c -lfrontend -lcrypto -m32
/usr/bin/ld: skipping incompatible //usr/local/lib/libcrypto.so when searching for -lcrypto
/usr/bin/ld: skipping incompatible //usr/local/lib/libcrypto.a when searching for -lcrypto
/usr/bin/ld: cannot find -lcrypto
/usr/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-linux-gnu/4.8/libgcc.a when searching for -lgcc
/usr/bin/ld: cannot find -lgcc
/usr/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-linux-gnu/4.8/libgcc_s.so when searching for -lgcc_s
/usr/bin/ld: cannot find -lgcc_s
collect2: error: ld returned 1 exit status

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 06:23:01 GMT

Hii Yuri ,

In-between compilation I am facing below issue :

Have a great day ,

Pramod

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 08:01:11 GMT

HIII ,

Can you please provide me the steps from scratch on wards for secure boot .

Re: HAB_IMX6UL

Yuri — Thu, 07 Mar 2019 08:29:12 GMT

Is Your Linux host 64- or 32-bit?

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 08:33:41 GMT

My host is of 64 bit . and imx (client) machine is of 32 bit .

Re: HAB_IMX6UL

Yuri — Thu, 07 Mar 2019 08:37:36 GMT

The CST is working only on host PC, therefore use 64-bit configuration.

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 08:39:59 GMT

I am using 64 bit configuration then I am getting error

$ gcc -o cst -I ../hdr -L ../../../linux64/lib *.c -lfrontend -lcrypto

/tmp/ccWNF7ae.o: In function `sk_X509_new_null':
adapt_layer_openssl.c:(.text+0x5): undefined reference to `OPENSSL_sk_new_null'
/tmp/ccWNF7ae.o: In function `sk_X509_push':
adapt_layer_openssl.c:(.text+0x2a): undefined reference to `OPENSSL_sk_push'
/tmp/ccWNF7ae.o: In function `sk_X509_pop_free':
adapt_layer_openssl.c:(.text+0x4f): undefined reference to `OPENSSL_sk_pop_free'
/tmp/ccWNF7ae.o: In function `gen_sig_data_ecdsa':
adapt_layer_openssl.c:(.text+0xa4f): undefined reference to `EVP_PKEY_get0_EC_KEY'
adapt_layer_openssl.c:(.text+0xa8d): undefined reference to `EVP_PKEY_get0_EC_KEY'
adapt_layer_openssl.c:(.text+0xbda): undefined reference to `ECDSA_SIG_get0'
/tmp/ccy3RGpA.o: In function `generate_hash':
openssl_helper.c:(.text+0x1f): undefined reference to `EVP_MD_CTX_new'
/tmp/ccy3RGpA.o: In function `sign_data':
openssl_helper.c:(.text+0x4b3): undefined reference to `EVP_MD_CTX_new'
openssl_helper.c:(.text+0x520): undefined reference to `EVP_MD_CTX_free'
openssl_helper.c:(.text+0x5a6): undefined reference to `EVP_MD_CTX_free'
openssl_helper.c:(.text+0x5c5): undefined reference to `EVP_MD_CTX_free'
/tmp/ccy3RGpA.o: In function `ver_sig_data':
openssl_helper.c:(.text+0xc8b): undefined reference to `EVP_PKEY_get0_RSA'
openssl_helper.c:(.text+0xd49): undefined reference to `ECDSA_SIG_set0'
openssl_helper.c:(.text+0xd78): undefined reference to `EVP_PKEY_get0_EC_KEY'
../../../linux64/lib/libfrontend.a(srk_helper.o): In function `srk_entry_pkcs1':
srk_helper.c:(.text+0x90): undefined reference to `EVP_PKEY_get0_RSA'
srk_helper.c:(.text+0xa8): undefined reference to `RSA_get0_key'
../../../linux64/lib/libfrontend.a(srk_helper.o): In function `srk_entry_ec':
srk_helper.c:(.text+0x564): undefined reference to `EVP_PKEY_get0_EC_KEY'
srk_helper.c:(.text+0x5d3): undefined reference to `EVP_PKEY_get0_EC_KEY'
/usr/bin/ld: ../../../linux64/lib/libfrontend.a(err.o): unrecognized relocation (0x2a) in section `.text'
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status
ubuntuforedd@Sachinedd2:~/Downloads/cstool/code/back_end/src$ l
adapt_layer_openssl.c openssl_helper.c pkey.c ssl_wrapper.c

Re: HAB_IMX6UL

Yuri — Thu, 07 Mar 2019 08:47:10 GMT

Is the OpenSSL library installed?

sudo apt-get install libssl-dev

Re: HAB_IMX6UL

PramodKumar — Thu, 07 Mar 2019 08:51:04 GMT

Yes already installed .

$ apt-get install libssl-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
libssl-dev is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 106 not upgraded.

version libssl1.1

Re: HAB_IMX6UL

PramodKumar — Fri, 08 Mar 2019 04:16:13 GMT

Hii Yuri ,

Have you did some R&D and share the steps to do the same from scratch on-wards .

Re: HAB_IMX6UL

PramodKumar — Sat, 09 Mar 2019 07:12:43 GMT

Hii ,

Can you please share the exact steps for the same , from scratch on-wards .

Re: HAB_IMX6UL

Yuri — Tue, 12 Mar 2019 04:48:05 GMT

Hello,

just tried on my 64-bit host (Debian 9), as stated in "Release_Notes.txt" of the CST 3.1.0 package:

To relink on 64 bit Linux machines:
       This requires the GCC compiler and the OpenSSL header files and
       library. For example on Ubuntu machines:
       sudo apt-get install gcc libssl-dev

cd <CST install directory/code/back_end/src
gcc -o cst -I ../hdr -L ../../../linux64/lib *.c -lfrontend -lcrypto

It works!

Regards,

Yuri.

Re: HAB_IMX6UL

PramodKumar — Wed, 13 Mar 2019 04:28:15 GMT

Hii Yuri ,

After execute the same command I got the error .

gcc -o cst -I ../hdr -L ../../../linux64/lib *.c -lfrontend -lcrypto
/tmp/ccKuEo7P.o: In function `sk_X509_new_null':
adapt_layer_openssl.c:(.text+0x5): undefined reference to `OPENSSL_sk_new_null'
/tmp/ccKuEo7P.o: In function `sk_X509_push':
adapt_layer_openssl.c:(.text+0x2a): undefined reference to `OPENSSL_sk_push'
/tmp/ccKuEo7P.o: In function `sk_X509_pop_free':
adapt_layer_openssl.c:(.text+0x4f): undefined reference to `OPENSSL_sk_pop_free'
/tmp/ccKuEo7P.o: In function `gen_sig_data_ecdsa':
adapt_layer_openssl.c:(.text+0xa4f): undefined reference to `EVP_PKEY_get0_EC_KEY'
adapt_layer_openssl.c:(.text+0xa8d): undefined reference to `EVP_PKEY_get0_EC_KEY'
adapt_layer_openssl.c:(.text+0xbda): undefined reference to `ECDSA_SIG_get0'
/tmp/ccSxXwCG.o: In function `generate_hash':
openssl_helper.c:(.text+0x1f): undefined reference to `EVP_MD_CTX_new'
/tmp/ccSxXwCG.o: In function `sign_data':
openssl_helper.c:(.text+0x4b3): undefined reference to `EVP_MD_CTX_new'
openssl_helper.c:(.text+0x520): undefined reference to `EVP_MD_CTX_free'
openssl_helper.c:(.text+0x5a6): undefined reference to `EVP_MD_CTX_free'
openssl_helper.c:(.text+0x5c5): undefined reference to `EVP_MD_CTX_free'
/tmp/ccSxXwCG.o: In function `ver_sig_data':
openssl_helper.c:(.text+0xc8b): undefined reference to `EVP_PKEY_get0_RSA'
openssl_helper.c:(.text+0xd49): undefined reference to `ECDSA_SIG_set0'
openssl_helper.c:(.text+0xd78): undefined reference to `EVP_PKEY_get0_EC_KEY'
../../../linux64/lib/libfrontend.a(srk_helper.o): In function `srk_entry_pkcs1':
srk_helper.c:(.text+0x90): undefined reference to `EVP_PKEY_get0_RSA'
srk_helper.c:(.text+0xa8): undefined reference to `RSA_get0_key'
../../../linux64/lib/libfrontend.a(srk_helper.o): In function `srk_entry_ec':
srk_helper.c:(.text+0x564): undefined reference to `EVP_PKEY_get0_EC_KEY'
srk_helper.c:(.text+0x5d3): undefined reference to `EVP_PKEY_get0_EC_KEY'
/usr/bin/ld: ../../../linux64/lib/libfrontend.a(err.o): unrecognized relocation (0x2a) in section `.text'
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status

Regards ,

Pramod

Re: HAB_IMX6UL

Yuri — Wed, 13 Mar 2019 04:52:47 GMT

Hello,

looks like the only way - try new (clean) Ununtu host installation.

Regards,

Yuri.

Re: HAB_IMX6UL

PramodKumar — Wed, 13 Mar 2019 07:10:25 GMT

Hello ,

But this issue is not of ubuntu this one is of cst tool .

Regards,

Pramod

Re: HAB_IMX6UL

Yuri — Wed, 13 Mar 2019 08:27:45 GMT

Hello,

I expect, that we have here some general, environment, packages installations

problem. At least, I cannot reproduce the issue.

Regards,

Yuri.

Re: HAB_IMX6UL

PramodKumar — Thu, 25 Apr 2019 06:23:47 GMT

Hi Yuri ,

We need to generate our own key and after done the below steps I am facing some issue . please check it and do needful for me . Please check the full process .

./hab4_pki_tree.sh

    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    This script is a part of the Code signing tools for Freescale's
    High Assurance Boot. It generates a basic PKI tree. The PKI
    tree consists of one or more Super Root Keys (SRK), with each
    SRK having two subordinate keys:
        + a Command Sequence File (CSF) key
        + Image key.
    Additional keys can be added to the PKI tree but a separate
    script is available for this. This this script assumes openssl
    is installed on your system and is included in your search
    path. Finally, the private keys generated are password
    protectedwith the password provided by the file key_pass.txt.
    The format of the file is the password repeated twice:
        my_password
        my_password
    All private keys in the PKI tree are in PKCS #8 format will be
    protected by the same password.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Do you want to use an existing CA key (y/n)?: y
Enter CA key name: STJ12345
Enter CA certificate name: STJSECUREBOOT
Do you want to use Elliptic Curve Cryptography (y/n)?: n
Enter key length in bits for PKI tree: 2048
Enter PKI tree duration (years): 10
How many Super Root Keys should be generated? 4
Do you want the SRK certificates to have the CA flag set? (y/n)?: y
A default 'serial' file was created!
A default file 'key_pass.txt' was created with password = test!

++++++++++++++++++++++++++++++++++++++++
+ Generating SRK key and certificate 1 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
..............................+++++
..........+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open STJ12345.pem for reading, No such file or directory
139889208842048:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('STJ12345.pem','r')
139889208842048:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load CA private key
Can't open ../crts/SRK1_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140669524993856:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK1_sha256_2048_65537_v3_ca_crt.pem','r')
140669524993856:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating CSF key and certificate 1 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
..................+++++
.....+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK1_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140443417438016:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK1_sha256_2048_65537_v3_ca_crt.pem','r')
140443417438016:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/CSF1_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
140359138977600:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/CSF1_1_sha256_2048_65537_v3_usr_crt.pem','r')
140359138977600:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating IMG key and certificate 1 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
................................................+++++
.....................................+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK1_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140660236867392:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK1_sha256_2048_65537_v3_ca_crt.pem','r')
140660236867392:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/IMG1_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
139938271336256:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/IMG1_1_sha256_2048_65537_v3_usr_crt.pem','r')
139938271336256:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating SRK key and certificate 2 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
....................................................................................+++++
...+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open STJ12345.pem for reading, No such file or directory
140461707548480:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('STJ12345.pem','r')
140461707548480:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load CA private key
Can't open ../crts/SRK2_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140388714141504:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK2_sha256_2048_65537_v3_ca_crt.pem','r')
140388714141504:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating CSF key and certificate 2 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
...................................................................................................+++++
...................................+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK2_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
139995852949312:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK2_sha256_2048_65537_v3_ca_crt.pem','r')
139995852949312:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/CSF2_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
140257066841920:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/CSF2_1_sha256_2048_65537_v3_usr_crt.pem','r')
140257066841920:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating IMG key and certificate 2 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
.............................................................................................+++++
..+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK2_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140189396019008:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK2_sha256_2048_65537_v3_ca_crt.pem','r')
140189396019008:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/IMG2_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
140477171283776:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/IMG2_1_sha256_2048_65537_v3_usr_crt.pem','r')
140477171283776:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating SRK key and certificate 3 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
.......................+++++
................+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open STJ12345.pem for reading, No such file or directory
140199426692928:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('STJ12345.pem','r')
140199426692928:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load CA private key
Can't open ../crts/SRK3_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140036135479104:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK3_sha256_2048_65537_v3_ca_crt.pem','r')
140036135479104:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating CSF key and certificate 3 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
.......+++++
...........+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK3_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140226137646912:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK3_sha256_2048_65537_v3_ca_crt.pem','r')
140226137646912:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/CSF3_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
140629534500672:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/CSF3_1_sha256_2048_65537_v3_usr_crt.pem','r')
140629534500672:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating IMG key and certificate 3 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
.....+++++
.........................+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK3_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140115059648320:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK3_sha256_2048_65537_v3_ca_crt.pem','r')
140115059648320:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/IMG3_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
140170731870016:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/IMG3_1_sha256_2048_65537_v3_usr_crt.pem','r')
140170731870016:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating SRK key and certificate 4 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
............................................................................................+++++
.............................................+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open STJ12345.pem for reading, No such file or directory
139783788898112:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('STJ12345.pem','r')
139783788898112:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load CA private key
Can't open ../crts/SRK4_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140251085322048:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK4_sha256_2048_65537_v3_ca_crt.pem','r')
140251085322048:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating CSF key and certificate 4 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
.............................+++++
...+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK4_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
140422708868928:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK4_sha256_2048_65537_v3_ca_crt.pem','r')
140422708868928:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/CSF4_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
139739998271296:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/CSF4_1_sha256_2048_65537_v3_usr_crt.pem','r')
139739998271296:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

++++++++++++++++++++++++++++++++++++++++
+ Generating IMG key and certificate 4 +
++++++++++++++++++++++++++++++++++++++++

Generating RSA private key, 2048 bit long modulus (2 primes)
....................................+++++
.....................+++++
e is 65537 (0x010001)
Using configuration from ../ca/openssl.cnf
Can't open ../crts/SRK4_sha256_2048_65537_v3_ca_crt.pem for reading, No such file or directory
139869409961792:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/SRK4_sha256_2048_65537_v3_ca_crt.pem','r')
139869409961792:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate
Can't open ../crts/IMG4_1_sha256_2048_65537_v3_usr_crt.pem for reading, No such file or directory
139792348456768:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:72:fopen('../crts/IMG4_1_sha256_2048_65537_v3_usr_crt.pem','r')
139792348456768:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:79:
unable to load certificate

Regards ,

Pramod