Ticket #229: bug_gen_cert.txt

File bug_gen_cert.txt, 4.8 KB (added by SiB, 9 years ago)

my todo to show the error.

Line 
1c:\PROGRA~2\OpenVPN\easy-rsa>rem sign the cert request with our ca, creating a c
2ert/key pair
3
4c:\PROGRA~2\OpenVPN\easy-rsa>openssl ca -days 3650 -out c:\PROGRA~2\OpenVPN\easy
5-rsa\keys\server.crt -in c:\PROGRA~2\OpenVPN\easy-rsa\keys\server.csr -extension
6s server -config openssl-1.0.0.cnf
7Using configuration from openssl-1.0.0.cnf
8Check that the request matches the signature
9Signature ok
10The Subject's Distinguished Name is as follows
11countryName           :PRINTABLE:'PL'
12stateOrProvinceName   :PRINTABLE:'PL'
13localityName          :PRINTABLE:'PL'
14organizationName      :PRINTABLE:'PL'
15organizationalUnitName:PRINTABLE:'PL'
16commonName            :PRINTABLE:'PL'
17name                  :PRINTABLE:'PL'
18emailAddress          :IA5STRING:'PL@PL.PL'
19Certificate is to be certified until Oct  5 20:57:44 2022 GMT (3650 days)
20Sign the certificate? [y/n]:y
21
22
231 out of 1 certificate requests certified, commit? [y/n]y
24Write out database with 1 new entries
25
26c:\PROGRA~2\OpenVPN\easy-rsa>rem delete any .old files created in this process,
27to avoid future file creation errors
28
29c:\PROGRA~2\OpenVPN\easy-rsa>del /q c:\PROGRA~2\OpenVPN\easy-rsa\keys\*.old
30
31c:\PROGRA~2\OpenVPN\easy-rsa>dir keys
32 Wolumin w stacji C to Win
33 Numer seryjny woluminu: 0AF5-C5F8
34
35 Katalog: c:\PROGRA~2\OpenVPN\easy-rsa\keys
36
372012-10-07  22:58    <DIR>          .
382012-10-07  22:58    <DIR>          ..
392012-10-07  22:58             3 798 01.pem
402012-10-07  22:54             1 188 ca.crt
412012-10-07  22:54               891 ca.key
422012-10-07  22:54               245 dh1024.pem
432012-10-07  22:58                92 index.txt
442012-10-07  22:58                21 index.txt.attr
452012-10-07  22:58                 3 serial
462012-10-07  22:58             3 798 server.crt
472012-10-07  22:57               668 server.csr
482012-10-07  22:57               887 server.key
49              10 plik(ów)             11 591 bajtów
50               2 katalog(ów)   2 272 952 320 bajtów wolnych
51
52c:\PROGRA~2\OpenVPN\easy-rsa>type keys\serial
5302
54
55c:\PROGRA~2\OpenVPN\easy-rsa>type keys\index.txt
56V       221005205744Z           01      unknown /C=PL/ST=PL/L=PL/O=PL/OU=PL/CN=P
57L/name=PL/emailAddress=PL@PL.PL
58
59c:\PROGRA~2\OpenVPN\easy-rsa>type keys\index.txt.attr
60unique_subject = yes
61
62c:\PROGRA~2\OpenVPN\easy-rsa>
63
64
65c:\PROGRA~2\OpenVPN\easy-rsa>build-key.bat client1
66
67c:\PROGRA~2\OpenVPN\easy-rsa>cd c:\PROGRA~2\OpenVPN\easy-rsa
68
69c:\PROGRA~2\OpenVPN\easy-rsa>rem build a request for a cert that will be valid f
70or ten years
71
72c:\PROGRA~2\OpenVPN\easy-rsa>openssl req -days 3650 -nodes -new -keyout c:\PROGR
73A~2\OpenVPN\easy-rsa\keys\client1.key -out c:\PROGRA~2\OpenVPN\easy-rsa\keys\cli
74ent1.csr -config openssl-1.0.0.cnf
75Generating a 1024 bit RSA private key
76.................++++++
77...++++++
78writing new private key to 'c:\PROGRA~2\OpenVPN\easy-rsa\keys\client1.key'
79-----
80You are about to be asked to enter information that will be incorporated
81into your certificate request.
82What you are about to enter is what is called a Distinguished Name or a DN.
83There are quite a few fields but you can leave some blank
84For some fields there will be a default value,
85If you enter '.', the field will be left blank.
86-----
87Country Name (2 letter code) [PL]:
88State or Province Name (full name) [PL]:
89Locality Name (eg, city) [PL]:
90Organization Name (eg, company) [PL]:
91Organizational Unit Name (eg, section) [PL]:
92Common Name (eg, your name or your server's hostname) [PL]:
93Name [PL]:
94Email Address [PL@PL.PL]:
95
96Please enter the following 'extra' attributes
97to be sent with your certificate request
98A challenge password []:
99An optional company name []:
100
101c:\PROGRA~2\OpenVPN\easy-rsa>rem sign the cert request with our ca, creating a c
102ert/key pair
103
104c:\PROGRA~2\OpenVPN\easy-rsa>openssl ca -days 3650 -out c:\PROGRA~2\OpenVPN\easy
105-rsa\keys\client1.crt -in c:\PROGRA~2\OpenVPN\easy-rsa\keys\client1.csr -config
106openssl-1.0.0.cnf
107Using configuration from openssl-1.0.0.cnf
108Check that the request matches the signature
109Signature ok
110The Subject's Distinguished Name is as follows
111countryName           :PRINTABLE:'PL'
112stateOrProvinceName   :PRINTABLE:'PL'
113localityName          :PRINTABLE:'PL'
114organizationName      :PRINTABLE:'PL'
115organizationalUnitName:PRINTABLE:'PL'
116commonName            :PRINTABLE:'PL'
117name                  :PRINTABLE:'PL'
118emailAddress          :IA5STRING:'PL@PL.PL'
119Certificate is to be certified until Oct  5 21:19:18 2022 GMT (3650 days)
120Sign the certificate? [y/n]:y
121failed to update database
122TXT_DB error number 2
123
124c:\PROGRA~2\OpenVPN\easy-rsa>rem delete any .old files created in this process,
125to avoid future file creation errors
126
127c:\PROGRA~2\OpenVPN\easy-rsa>del /q c:\PROGRA~2\OpenVPN\easy-rsa\keys\*.old
128Nie mo¿na odnaleŸæ c:\PROGRA~2\OpenVPN\easy-rsa\keys\*.old.
129
130c:\PROGRA~2\OpenVPN\easy-rsa>