Re: sigining host certificate : index.txt not found

On Mon, 17 Feb 2003 [email protected] wrote:
> while sigining the host certificate using the command
>
> >>openssl ca -in hostReq.pem -days 730 -out hostCert.pem -notext
>
> after asking for PEM keyword , tries to open  index.txt, and gives an error
> when it is not found.

On SuSE 8.1 it is in /usr/share/ssl/index.txt, i.e. the place where your
private Certificate Authority stores certificates that it creates.  It is
mode 644 owned by whichever user is authorized to sign certificates, and
starts out empty.  It contains a list of all the certificates the Authority
has ever signed, e.g.

V       120330002351Z           01      unknown /C=US/ST=CA/O=The Carter
Family
Trust/OU=CFT Web Server on Xena/CN=xena.cft.ca.us/[email protected]

Hope this helps!

James F. Carter          Voice 310 825 2897    FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: [email protected]  http://www.math.ucla.edu/~jimc (q.v. for PGP key)