Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to figure out how to generate a CSR so I can generate and install a SSL cert.

Here's a link to what I've what tried. Granted that post was for m0n0wall, but I figured openssl is openssl.

Heres where I get stuck.

When I run this:

/usr/bin/openssl req -new -key mykey.key -out mycsr.csr -config /usr/local/ssl/openssl.cnf 

I get this:

error on line -1 of /usr/local/ssl/openssl.cnf
54934:error:02001002:system library:fopen:No such file or directory:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:122:fopen('/usr/local/ssl/openssl.cnf','rb')
54934:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:125:
54934:error:0E078072:configuration file routines:DEF_LOAD:no such file:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/conf/conf_def.c:197:
share|improve this question
I have a feeling that the error has something to do with the "no such file" part of the error that gets repeated a couple times, I'm just not sure how to troubleshoot it. – ErnieTheGeek Jan 12 '11 at 14:49
Ernie: I've tried to edit the formatting so we can better read the error messages, but I have a bad feeling some of the formatting has still been lost. Could you check and maybe improve it further, so we can see what you saw, CRs and all? – MadHatter Jan 12 '11 at 14:52
Also, can you confirm that /usr/local/ssl/openssl.cnf exists? – MadHatter Jan 12 '11 at 14:54
All of the info is there, its a bit out of order. I'll try and correct it in a sec. And no, that file doesn't exist. I don't have a /usr/local/ssl directory listed there. – ErnieTheGeek Jan 12 '11 at 14:59
Ok, thats what I see when I run that command. – ErnieTheGeek Jan 12 '11 at 15:02
up vote 1 down vote accepted

The first two lines are complaining about the absence of openssl.cnf. My openssl, which works fine, does the same thing when I point it at a non-existent config file. Could you try again without the -config stuff, and see how it goes?

share|improve this answer
Looks like that may have done it. I'll apply for the cert now and let you know shortly. – ErnieTheGeek Jan 12 '11 at 15:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.