Collections:
Other Resources:
OpenSSL "ca" Error "lookup failed for ca::policy"
Why I am getting the "variable lookup failed for ca::policy" error when running OpenSSL "ca" command?
✍: FYIcenter.com
You are getting the "variable lookup failed for ca::policy" error, because OpenSSL "ca" command can not find the required "policy" option in the configuration file.
For example, if you have the follow configuration file, test.cnf, without "policy" option defined:
# Unnamed section of generic options # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db default_md = md5
You will get an error, because "policy" is a required option:
C:\Users\fyicenter>\local\OpenSSL-Win32\bin\openssl.exe OpenSSL> ca -in test.csr -keyfile my_ca.key -cert my_ca.crt -config test.cnf Using configuration from test.cnf Enter pass phrase for my_ca.key:fyicenter variable lookup failed for my_ca_default::policy 5816:error:02001002:system library:fopen:No such file or directory: .\crypto\bio\bss_file.c:175:fopen('./my_ca/certs.db.attr','rb') 5816:error:2006D080:BIO routines:BIO_new_file:no such file:.\crypto\bio\bss_file.c:178: 5816:error:0E078072:configuration file routines:DEF_LOAD:no such file: .\crypto\conf\conf_def.c:195: 5816:error:0E06D06C:configuration file routines:NCONF_get_string:no value: .\crypto\conf\conf_lib.c:324:group=my_ca_default name=email_in_dn 5816:error:0E06D06C:configuration file routines:NCONF_get_string:no value: .\crypto\conf\conf_lib.c:324:group=my_ca_default name=policy error in ca
Fixing this error is easy. Just add the "policy" option in the section pointed by the "default_ca" option in the configuration file:
# Unnamed section of generic options # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db default_md = md5 policy = my_ca_policy
Remember to add the [my_ca_policy] section with policy options in the configuration file. Policy options control validation rules.
⇒ OpenSSL "ca" Error "lookup failed for ca::serial"
2016-09-08, 11019🔥, 0💬
Popular Posts:
Certificate Summary: Subject: RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 Issuer: DigiCert Global Roo...
Certificate Summary: Subject: Symantec Class 3 EV SSL CA - G3 Issuer: VeriSign Class 3 Public Primar...
Certificate Summary: Subject: thawte EV SSL CA - G3 Issuer: thawte Primary Root CA Expiration: 2023-...
Certificate Summary: Subject: VeriSign Class 3 International Server CA - G3 Issuer: VeriSign Class 3...
Certificate summary - Owner: *.enovance.com, eNovance, L=Paris, ST=None, FR Issuer: DigiCert High As...