Page 1 of 1
I botched the Certificate Authority Script...now what?
Posted: Mon Mar 12, 2012 9:05 pm
by techlife
I started trying to get my server setup to send system messages via gmail. I ran the CA script and screwed something up. I wound up Ctrl-Zing out of it before it was complete. Now, when I try to run ./CA -newca nothing happens. I just need to start over. I assume there is some file that I need to delete to accomplish this but I have no idea what or where. Help!
Thanks!
Re: I botched the Certificate Authority Script...now what?
Posted: Wed Mar 14, 2012 4:58 am
by bigfoot65
Maybe take a look in that directory and remove any files running that script may have created. Also, a reboot might be required if it is still unresponsive.
I have never heard of this issue myself. I presume you already checked Google.
Re: I botched the Certificate Authority Script...now what?
Posted: Wed Mar 14, 2012 1:00 pm
by techlife
Yeah I spent a while on Google. I'll read through the script itself and see what I can come up with... Thanks anyway BF. =)
Re: I botched the Certificate Authority Script...now what?
Posted: Wed Mar 14, 2012 9:22 pm
by techlife
I finally found it. If this happens, you have to delete /etc/pki/CA/private/cakey.pem
Re: I botched the Certificate Authority Script...now what?
Posted: Thu Mar 15, 2012 4:49 am
by bigfoot65
Awesome. I would love to capture this in the wiki somehow. Maybe we need to start a Problem and Solution (P&S) section
For example:
P. While generating a certificate the process is interrupted. I tried to generate the certificate again, but it is now broken. No error message or prompts are displayed.
S. Remove /etc/pki/CA/private/cakey.pem file.
There are so many common problems that folks have that it would be nice to put them in one location and list the potential solutions.
May need to kick this one around a bit.
Re: I botched the Certificate Authority Script...now what?
Posted: Tue Mar 20, 2012 7:31 pm
by techlife
Maybe we need to start a Problem and Solution (P&S) section.
There are so many common problems that folks have that it would be nice to put them in one location and list the potential solutions.
I
really like this idea. I think it could be a huge benefit to many users.
On the CA generation, you may want to make it: rm /etc/pki/CA/private/*.pem
If you botch it later in the process, you may have more than one that needs to be deleted.
