Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

4
  • Aren't you explicitly specify the output files with -keyout cakey.pem -out cacert.pem? Commented May 30, 2019 at 9:29
  • Yes My first command I issued was 'openssl req -x509 -newkey rsa:4096 -keyout cakey.pem -out cacert.pem -days 3650'. I was expecting the cakey.pem to stay in the root directory and the cakey.pem to go into the 'private' directory. Commented May 30, 2019 at 9:44
  • @muru so instead I would have to use something like this 'openssl req -x509 -newkey rsa:4096 -days 3650'?? Commented May 30, 2019 at 9:47
  • 1
    Oh, wait. Your config file has [ CA_defaults ]. That's for the openssl ca command. openssl req config goes in the [req] section. See phildev.net/ssl/opensslconf.html Commented May 30, 2019 at 10:19