unable to find 'distinguished_name' in config

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

unable to find 'distinguished_name' in config

3,643 Views
antoajisha_m
Contributor I

Hi,

I am trying to CST -3.3.0 in a ubuntu 18.04 using Openssl 1.1.1.

When I run the command : ~/cst/release/keys$ ./hab4_pki_tree.sh

I get the following error:

+++++++++++++++++++++++++++++++++++++
+ Generating CA key and certificate +
+++++++++++++++++++++++++++++++++++++

Generating an EC private key
writing new private key to 'temp_ca.pem'
-----

++++++++++++++++++++++++++++++++++++++++
+ Generating SRK key and certificate 1 +
++++++++++++++++++++++++++++++++++++++++

read EC key
writing EC key
unable to find 'distinguished_name' in config
problems making Certificate Request
139933947830720:error:0E06D06C:configuration file routines:NCONF_get_string:no value:../crypto/conf/conf_lib.c:273:group=req name=distinguished_name
Using configuration from ../ca/openssl.cnf
139658086519232:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('./temp_srk_req.pem','r')
139658086519232:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
Can't open ../crts/SRK1_sha256_prime256v1_v3_ca_crt.pem for reading, No such file or directory
139841671344576:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('../crts/SRK1_sha256_prime256v1_v3_ca_crt.pem','r')
139841671344576:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
unable to load certificate
rm: cannot remove './temp_srk_req.pem': No such file or directory

I did not make any changes to the downloaded archive file. Any idea on how to correct this? Please provide any suggestion on this.

0 Kudos
1 Reply

3,556 Views
Yuri
NXP Employee
NXP Employee

Hello,

 

  First, to build the backend for CST 3.3.0 you need OpenSSL 1.0.2 as stated in the

release/code/back_end-hsm/README.md file.

 

The CST-HSM backend depends on:

- OpenSSL 1.0.2x

   Also - is it possible to look at full log - in order to reproduce the issue.

Regards,

Yuri.

0 Kudos