[GitHub] dsambandam opened a new issue #2533: can't generate ca key using the open ssl cnf file suggested for TLS Auth

[GitBox <gi...@apache.org>]

dsambandam opened a new issue #2533: can't generate ca key using the open ssl cnf file suggested for TLS Auth
URL: https://github.com/apache/incubator-pulsar/issues/2533
 
 
   #### Expected behavior
   
   Tell us what should happen
   
   #### Actual behavior
   can't generate ca key using the open ssl cnf file suggested 
   
   #### Steps to reproduce
   $ mkdir my-ca
   $ cd my-ca
   $ wget https://github.com/apache/incubator-pulsar/tree/master/site2/website/static/examples/openssl.cnf
   $ export CA_HOME=$(pwd)
   
   mkdir certs crl newcerts private
   $ chmod 700 private/
   $ touch index.txt
   $ echo 1000 > serial
   $ openssl genrsa -aes256 -out private/ca.key.pem 4096
   $ chmod 400 private/ca.key.pem
   $ **openssl req -config openssl.cnf -key private/ca.key.pem \
         -new -x509 -days 7300 -sha256 -extensions v3_ca \
         -out certs/ca.cert.pem**
   How can we reproduce the issue
   
   #### System configuration
   **Pulsar version**: 2.1
   
   
    openssl req -config openssl.cnf -key private/ca.key.pem \
   >       -new -x509 -days 7300 -sha256 -extensions v3_ca \
   >       -out certs/ca.cert.pem
   **error on line 153 of openssl.cnf
   140172073654160:error:0E079065:configuration file routines:DEF_LOAD_BIO:missing equal sign:conf_def.c:345:line 153**
   
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services