Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create CA serial file when generating ssl certs for devenv #15

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ricklambrechts
Copy link

When running the ./scripts/setup-devenv.sh script I got the following output.

Generating SSL CERT from CSR
Signature ok
subject=C = US, CN = localhost
Getting CA Private Key
/..../minbzk/nl-wallet/scripts/devenv/target/configuration_server/ca.crt.srl: No such file or directory
140448814343488:error:06067099:digital envelope routines:EVP_PKEY_copy_parameters:different parameters:../crypto/evp/p_lib.c:93:
140448814343488:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:69:fopen('/..../minbzk/nl-wallet/scripts/devenv/target/configuration_server/ca.crt.srl','r')
140448814343488:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:76:

So it was missing the ca.crt.srl file. After adding the -CAcreateserial option to the openssl x509 command the issue is resolved because OpenSSL will create the serial file if the file does not exist.

See also the OpenSSL documentation https://docs.openssl.org/3.0/man1/openssl-x509/#micro-ca-options.

@ricklambrechts
Copy link
Author

@rubin55 is it possible to check these PR?

@rubin55
Copy link
Collaborator

rubin55 commented Oct 25, 2024

Hi @ricklambrechts yes. but due to how we structured publication currently, it's kinda involved to "retrofit" the changes in a proper way. Let me have a look-see coming week and see how I can get your (appreciated!) changes into our main repository. Will keep you posted.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants