我没有本地服务器的CA签名证书：serv.org.com。
因此，我遵循的步骤为IAM服务器创建自签名证书。
openssl genrsa -des3 -out iamserver.key 4096
openssl req -new -key iamserver.key -out iamserver.csr -subj“/o = org/cn = org/cn = iamAccessor
” -ca ca.crt -cakey ca.key -out iamserver.crt -caserial ca.seq
所述的步骤成功。
但是，当我尝试使用错误运行以下步骤时。
“如果您使用自我创建的CA签署证书，则以下示例脚本演示了如何使用它签署服务器证书。”
OpenSSL x509 -passin Pass：passw0rd -req -days 365 -in iamserver.csr -ca ca.crt
-cakey ca.key -out iamserver.crt -cacreateSerial -careRial ca.seq -sha256 -extfile
＆lt;（printf“ [san] \ nsubjectaltname = dns：iamserver.com”）-extensions san
我收到了一个错误消息：系统无法找到特定文件。
I don't have the CA signed certificate for local server: serv.org.com.
Therefore, I follow the steps to create the self-signed certificate for IAM server.
openssl genrsa -des3 -out iamserver.key 4096
openssl req -new -key iamserver.key -out iamserver.csr -subj "/O=Org/CN=IAMAccessor" -sha256
openssl x509 -req -days 365 -in iamserver.csr -CA ca.crt -CAkey ca.key -out iamserver.crt -CAserial ca.seq
For the steps above are successful.
However, when I try to run the following steps with error.
"If you are using your self-created CA to sign your certificate, the following sample script demonstrates how to sign a server certificate with it."
openssl x509 -passin pass:passw0rd -req -days 365 -in iamserver.csr -CA ca.crt
-CAkey ca.key -out iamserver.crt -CAcreateserial -CAserial ca.seq -sha256 -extfile
<(printf "[SAN]\nsubjectAltName=DNS:iamserver.com") -extensions SAN
I got an error message: System failed to found the specific files.
发布评论
评论（3）
您正在传递“ - in iamserver.csr”，但在您的DIR列表中似乎没有CSR。
You are passing an "-in iamserver.csr" but there does not appear to be a csr for iamserver in your dir listing.
请小心，发布答案，不要尝试编辑它们。
我只是在响应原始帖子中出现的图像。
在第一张图片中，您没有指定通往iamserver.csr的正确路径
该文件位于您的IAMServer目录中，因此看起来像“ -in-iamserver \ iamserver.csr”，
您响应的图片中都在iamServer目录中，但是所有其他CA文件都在上面的目录中。因此，您需要修复通往所有输入的路径，以便它们匹配并指向某些内容。
Please be careful, post responses to answers, don't try to edit them.
I'm just responding to the image that came in the original post.
In the first picture, you did not specify the correct path to iamserver.csr
That file was in your iamserver directory, so it should look like "-in iamserver\iamserver.csr"
In the picture you responded with you were in iamserver directory, but all of your other ca files where in the directory above. So you need to fix the path to all of the inputs so that they match and point to something.
感谢您的答复。我已经检查了很多次，这不是文件名错误。
我收到了所有必需文件的目录，例如ca.key和ca.crt，iamserver.csr，iamserver.crt。
这是Windows问题，需要创建.cnf文件，例如SSL-Extensions-509.cnf为-extfile，根据所附的教程页面。
在将脚本修改为以下内容后，它现在正常工作。
Thanks for your replied. I have checked for many times, it is not the file name errors.
I got the directory with all required files such as ca.key and ca.crt, iamserver.csr, iamserver.crt.
It is the windows problem, it is required to create a .cnf file e.g. ssl-extensions-509.cnf as -extfile, according to the tutorial page as attached.
https://www.sit.de/SIT/hvblog.nsf/dx/26.05.2020165717HVOKJX.htm
After modified the scripts to the following, it is working now.