Chaining cerificate with openssl

Question

hello seniors,
i am really stuck and am running out of time to finish my project on time. i need a certificates chain which i am using openssl to create it but i never can sign a certificate request by my CA. i use below commands:
1- Create a Certificate Authority private key (this is your most important key):
openssl req -new -newkey rsa:1024 -nodes -out ca.csr -keyout ca.key
2- Create your CA self-signed certificate:
openssl x509 -trustout -signkey ca.key -days 365 -req -in ca.csr -out ca.pem
3- Issue a client certificate by first generating the key, then request (or use one provided by external system) then sign the certificate using private key of your CA:
openssl genrsa -out client.key 1024
openssl req -new -key client.key -out client.csr
all above works fine but following last command produced the errors listed.
openssl ca -in client.csr -out client.cer
by the way, i have included "private_key = $dir/private/cakey.pem" in my configuration file.
6072:error:02001003:system library:fopen:No such process:./crypto/bio/bss_file.c:126:fopen('/usr/local/ssl/openssl.cnf','rb')
6072:error:2006D080:BIO routines:BIO_new_file:no such file:./crypto/bio/bss_file.c:129:
6072:error:0E078072:configuration file routines:DEF_LOAD:no such file:./crypto/conf/conf_def.c:197:
unable to write 'random state'
any help is much appreciated.
Regards
Reza

Answer 1

hello seniors,
i am really stuck and am running out of time to finish my project on time. i need a certificates chain which i am using openssl to create it but i never can sign a certificate request by my CA. i use below commands:
1- Create a Certificate Authority private key (this is your most important key):
openssl req -new -newkey rsa:1024 -nodes -out ca.csr -keyout ca.key
2- Create your CA self-signed certificate:
openssl x509 -trustout -signkey ca.key -days 365 -req -in ca.csr -out ca.pem
3- Issue a client certificate by first generating the key, then request (or use one provided by external system) then sign the certificate using private key of your CA:
openssl genrsa -out client.key 1024
openssl req -new -key client.key -out client.csr
all above works fine but following last command produced the errors listed.
openssl ca -in client.csr -out client.cer
by the way, i have included "private_key = $dir/private/cakey.pem" in my configuration file.
6072:error:02001003:system library:fopen:No such process:./crypto/bio/bss_file.c:126:fopen('/usr/local/ssl/openssl.cnf','rb')
6072:error:2006D080:BIO routines:BIO_new_file:no such file:./crypto/bio/bss_file.c:129:
6072:error:0E078072:configuration file routines:DEF_LOAD:no such file:./crypto/conf/conf_def.c:197:
unable to write 'random state'
any help is much appreciated.
Regards
Reza