I botched the Certificate Authority Script...now what?

[techlife]

I started trying to get my server setup to send system messages via gmail. I ran the CA script and screwed something up. I wound up Ctrl-Zing out of it before it was complete. Now, when I try to run ./CA -newca nothing happens. I just need to start over. I assume there is some file that I need to delete to accomplish this but I have no idea what or where. Help!

Thanks!

[bigfoot65]

Maybe take a look in that directory and remove any files running that script may have created. Also, a reboot might be required if it is still unresponsive.

I have never heard of this issue myself. I presume you already checked Google.

[techlife]

Yeah I spent a while on Google. I'll read through the script itself and see what I can come up with... Thanks anyway BF. =)

[techlife]

I finally found it. If this happens, you have to delete /etc/pki/CA/private/cakey.pem

[bigfoot65]

Awesome. I would love to capture this in the wiki somehow. Maybe we need to start a Problem and Solution (P&S) section

For example:

P. While generating a certificate the process is interrupted. I tried to generate the certificate again, but it is now broken. No error message or prompts are displayed.

S. Remove /etc/pki/CA/private/cakey.pem file.

There are so many common problems that folks have that it would be nice to put them in one location and list the potential solutions.

May need to kick this one around a bit.

[techlife]

Maybe we need to start a Problem and Solution (P&S) section.
There are so many common problems that folks have that it would be nice to put them in one location and list the potential solutions.

I really like this idea. I think it could be a huge benefit to many users.

On the CA generation, you may want to make it: rm /etc/pki/CA/private/*.pem

If you botch it later in the process, you may have more than one that needs to be deleted.