OpenSSL and error in reading openssl conf file

Question

I am running windows xp 32bit  I just downloaded Openssl from the following URL and installed it  http   www slproweb com products Win32OpenSSL html  and then i tried to create a self signed certificate by using the following command  openssl req -x509 -days 365 -newkey rsa 1024 -keyout hostkey pem -nodes -out hostcert pem   then it started giving the following error      Unable to load config info from  usr local ssl openssl cnf   Then after googling sometime i changed the above command to   openssl req -config C  OpenSSL bin openssl conf -x509 -days 365 -newkey rsa 1024 -keyout hostkey pem -nodes -out hostcert pem   But now i get the following error in the command prompt     error on line -1 of C  OpenSSL bin openssl conf   4220 error 02001002 system library fopen No such file or   directory   crypto bio bss file c 126 fopen  C  OpenSSL bin openssl conf   rb     4220 error 2006D080 BIO routines BIO new file no such   file   crypto bio bss file c 129    4220 error 0E078072 configuration file routines DEF LOAD no such   file   crypto conf conf def c 197    Please help  Thanks in advance

User · Answer

I know this question is old but here is how I solved it.

I copied the openssl.cnf file from the bin directory to the parent directory which is C:/Openssl/openssl.cnf instead of C:/Openssl/bin/openssl.cnf and worked fine.

User · Answer

If openssl installation was successfull  search for  OPENSSL  in c drive to locate the config file and set the path   set OPENSSL CONF  lt location where cnf is available gt  openssl cnf   It worked out for me

User · Answer

I just had a similar error using the openssl exe from the Apache for windows bin folder  I had the -config flag specified by had a typo in the path of the openssl cnf file  I think you ll find that  openssl req -config C  OpenSSL bin openssl conf -x509 -days 365 -newkey rsa 1024 -keyout hostkey pem -nodes -out hostcert pem   should be  openssl req -config  C  OpenSSL bin openssl cnf  -x509 -days 365 -newkey rsa 1024 -keyout hostkey pem -nodes -out hostcert pem   Note  the conf should probably be cnf

User · Answer

If you are seeing an error something like      error on line -1 c apacheconfopenssl cnf   try changing from back slash to front slash in the -config

User · Answer

Just add to your command line the parameter -config c  your openssl path openssl cfg  changing your openssl path to the real installed path

User · Answer

This workaround helped us so much at my job  Tech Support   we made a simple batch file we could run from anywhere  We didnt have the permissions to install it   This workaround will set the variable and then run OpenSSL for you  It also opens up the bin folder for you  cause this is where any files you create or modify will be saved   Also  this is only for Windows   How to Set Up    Download the OpenSSL binaries here   Note that this is confirmed to work with version 0 9 8h   Copy this code to a file named StartOpenSSL bat  Save this to a location of your choice  It can be run from anywhere    echo off title OpenSSL  cd openssl bin  if exist  C  openssl share openssl cnf     set OPENSSL CONF c  openssl share openssl cnf start explorer exe c  openssl bin  echo Welcome to OpenSSL  openssl    else    echo Error  openssl cnf was not found echo File openssl cnf needs to be present in c  openssl share pause     exit  Once you have downloaded the OpenSSL binaries  extract them to your C drive in a folder titled OpenSSL   The path needs to be C  OpenSSL   Do not move any of the folders contents around  just extract them to the folder  You are ready to use OpenSSL  This is a great workaround for Windows users who dont have the privileges to install it as it requires no permissions  Just run the bat file from earlier by double clicking it

User · Answer

On Windows you can also set the environment property OPENSSL CONF  For example from the commandline you can type   set OPENSSL CONF c  libs openssl-0 9 8k openssl cnf   to validate it you can type   echo  OPENSSL CONF    You can also set it as part of the computer s environmental variables so all users and services have it available by default  See  for example  Environment variables in Windows NT and How To Manage Environment Variables in Windows XP   Now you can run openssl commands without having to pass the config location parameter

User · Answer

https   github com xgqfrms-gildata App001 issues 3   first  make sure you have an openssl cnf file in the right path  if you can t find it  just download one and copy it to your setting path      echo  OPENSSL CONF     set OPENSSL CONF C  OpenSSL bin openssl cnf

User · Answer

I had the same issue on Windows  It was resolved by setting the environment variable as follow     Variable name  OPENSSL CONF Variable value  C  OpenSSl Directory  bin openssl cnf

User · Answer

Just try to run openssl exe as administrator

User · Answer

I know this is old -- but thought others that happen on this  and use Visual Studio  might benefit   I read this on another post that I can t seem to find   Open your config in notepad   and make sure it s Encoding is UTF-8  i e   not UTF-8-BOM     This would have save me a lot of searching trial n errors

User · Answer

set OPENSSL CONF c   path to openSSL  bin openssl cfg   take care of the right extension  openssl cfg not cnf    I have installed OpenSSL from here  http   slproweb com products Win32OpenSSL html

User · Answer

Run the command as administrator and copy the config file to somewhere where you have read rights and specify the path with the -config parameter

User · Answer

If you installed OpenSSL on Windows together with Git  then add this to your command  -config  quot C  Program Files Git usr ssl openssl cnf quot

User · Answer

If you have installed Apache with OpenSSL navigate to bin directory  In my case D  apache bin    These commands also work if you have stand alone installation of openssl   Run these commands   openssl req -config d  apache conf openssl cnf -new -out d  apache conf server csr -keyout d  apache conf server pem openssl rsa -in d  apache conf server pem -out d  apache conf server key openssl x509 -in d  apache conf server csr -out d  apache conf server crt -req -signkey d  apache conf server key -days 365    This will create self-signed certificate that you can use for development purposes  Again if you have Apache installed in the httpd conf stick these      lt IfModule ssl module gt      SSLEngine on     SSLCertificateFile  D  apache conf server crt      SSLCertificateKeyFile  D  apache conf server key     lt  IfModule gt

User · Answer

The problem here is that there ISN T an openssl cnf file given with the GnuWin32 openssl stuff   You have to create it   You can find out HOW to create an openssl cnf file by going here   http   www flatmtn com article setting-ssl-certificates-apache  Where it lays it all out for you on how to do it   PLEASE NOTE  The openssl command given with the backslash at the end is for UNIX   For Windows   1 Remove the backslash  and 2 Move the second line up so it is at the end of the first line    So you get just one command    ALSO  It is VERY important to read through the comments   There are some changes you might want to make based upon them

User · Answer

Just create an openssl cnf file yourself like this in step 4  http   www flatmtn com article setting-openssl-create-certificates  Edit after link stopped working The content of the openssl cnf file was the following       OpenSSL configuration file       Establish working directory   dir                        ca   default ca                CA default    CA default   serial                     dir serial database                   dir certindex txt new certs dir                  dir certs certificate                dir cacert pem private key                dir private cakey pem default days                  365 default md                md5 preserve                  no email in dn               no nameopt                   default ca certopt                   default ca policy                    policy match    policy match   countryName               match stateOrProvinceName           match organizationName              match organizationalUnitName            optional commonName                supplied emailAddress                  optional    req   default bits                  1024            Size of keys default keyfile               key pem         name of generated keys default md                md5                 message digest algorithm string mask               nombstr         permitted characters distinguished name            req distinguished name req extensions                v3 req    req distinguished name     Variable name             Prompt string  -------------------------    ---------------------------------- 0 organizationName            Organization Name  company  organizationalUnitName            Organizational Unit Name  department  division  emailAddress                  Email Address emailAddress max              40 localityName                  Locality Name  city  district  stateOrProvinceName           State or Province Name  full name  countryName               Country Name  2 letter code  countryName min               2 countryName max               2 commonName                Common Name  hostname  IP  or your name  commonName max                64    Default values for the above  for consistency and less typing    Variable name             Value  ------------------------     ------------------------------ 0 organizationName default        My Company localityName default              My Town stateOrProvinceName default       State or Providence countryName default           US    v3 ca   basicConstraints              CA TRUE subjectKeyIdentifier              hash authorityKeyIdentifier            keyid always issuer always    v3 req   basicConstraints              CA FALSE subjectKeyIdentifier              hash

User · Answer

I was also facing same issue  Below are the steps to resolve it   check your openssl version   openssl version   If your version is below   OpenSSL 1 1 1h  22 Sep 2020   go to below link and download latest full version of openssl  openssl windows installer After installation add openssl path at the top of  PATH  variable in system path  confirm your version is latest by opening new command prompt and running command in step 1 Now you re ready to run the command again and this time it will work

[windows] OpenSSL and error in reading openssl.conf file

Examples related to windows

Examples related to configuration

Examples related to openssl

Examples related to environment-variables