LibreSSL/OpenSSL Error

LibreQuest

I'm trying to generate a self signed SSL cert and getting an error on NetBSD 11.0 RC5

I'm currently working in a virtual machine for testing so I may have typos typing out this error.

Can't open "/etc/openssl/openssl.cnf" for reading, No such file or directory FFFFFFFFFFFFFFFFFFF:error:80000002:system library: BIO_new_file: No such file or directory:/usr/src/crypto/external/apache2/openssl/dist/crypto/bio/bss_file.c:67:calling fopen(/etc/openssl/openssl.cnf, r)
FFFFFFFFFFFFFFFFF:error:10000080:BIO routines:BIO_new_file:no such file:/usr/src/crypto/external/apache2/openssl/dist/crypto/bio/bss_file.c:75:

Command I am using is
openssl req -new -x509 -nodes -keyout /usr/pkg/etc/httpd/server.key -out /usr/pkg/etc/httpd/server.crt

rvp

LibreQuest Can't open "/etc/openssl/openssl.cnf" for reading, No such file or directory

There's a default config. file in /usr/share/examples/openssl/ which you can copy into /etc/openssl/.

Both FreeBSD and OpenBSD, and also Linux (Ubuntu 24.04, at least) come with a default /etc/ssl/openssl.cnf. Dunno why NetBSD doesn't. You should file a PR.

LibreQuest

Same error in NetBSD 10.1

LibreQuest

After reading around, there apparently is meant to be a pointer to the proper location for the config file, that is missing. However, adding

-subj "/"

to the end of the command successfully renders the keys.

LibreQuest

Just as a note, I have been working on a bash script that installs a project that I have been working on for like 5 or so years. But I wrote the bash script for FreeBSD first and then made changes for NetBSD. I can't say I would recommend doing that. It may be better to start a new bash script for each system. Anyway, it's done now. But my goodness lot of differences in the file system structure and package names. 😃 Fun times!

LibreQuest

:/ File a PR. If you could give me a step by step on the process I will do that. 😃 The last time @Jay did it for me. hahaha

Jay

LibreQuest hi it's very easy to fill web form here https://www.netbsd.org/cgi-bin/sendpr.cgi?gndb=netbsd

Where you put your email, name, uname -a output and describe problem 🙂

LibreQuest

Alright, I have made the PR. Maybe I even did it correctly.

https://gnats.netbsd.org/60365

LibreQuest

For the moment I've added a fix to my script that copies the cnf file over to the proper location. And it indeed does fix it. The -subj "/" hack isn't helpful but to avoid the error output.

LibreQuest

So, I changed my mind again. haha I'm just writing this config file instead. It's from the OpenSSL page as an example.

`[ req ]
default_bits = 2048
default_keyfile = keyfile.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
prompt = no
output_password = mypass

[ req_distinguished_name ]
C = GB
ST = Test State or Province
L = Test Locality
O = Organization Name
OU = Organizational Unit Name
CN = Common Name
emailAddress = test@email.address

[ req_attributes ]
challengePassword = A challenge password`