Hi,
I am trying to CST -3.3.0 in a ubuntu 18.04 using Openssl 1.1.1.
When I run the command : ~/cst/release/keys$ ./hab4_pki_tree.sh
I get the following error:
+++++++++++++++++++++++++++++++++++++
+ Generating CA key and certificate +
+++++++++++++++++++++++++++++++++++++
Generating an EC private key
writing new private key to 'temp_ca.pem'
-----
++++++++++++++++++++++++++++++++++++++++
+ Generating SRK key and certificate 1 +
++++++++++++++++++++++++++++++++++++++++
read EC key
writing EC key
unable to find 'distinguished_name' in config
problems making Certificate Request
139933947830720:error:0E06D06C:configuration file routines:NCONF_get_string:no value:../crypto/conf/conf_lib.c:273:group=req name=distinguished_name
Using configuration from ../ca/openssl.cnf
139658086519232:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('./temp_srk_req.pem','r')
139658086519232:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
Can't open ../crts/SRK1_sha256_prime256v1_v3_ca_crt.pem for reading, No such file or directory
139841671344576:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('../crts/SRK1_sha256_prime256v1_v3_ca_crt.pem','r')
139841671344576:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
unable to load certificate
rm: cannot remove './temp_srk_req.pem': No such file or directory
I did not make any changes to the downloaded archive file. Any idea on how to correct this? Please provide any suggestion on this.
Hello,
First, to build the backend for CST 3.3.0 you need OpenSSL 1.0.2 as stated in the
release/code/back_end-hsm/README.md file.
The CST-HSM backend depends on:
- OpenSSL 1.0.2x
Also - is it possible to look at full log - in order to reproduce the issue.
Regards,
Yuri.