Error Trying to Generate a CSR using DXCERTGEN (Linux/UNIX)

book

Article ID: 16683

calendar_today

Updated On:

Products

DIRECTORY

Issue/Introduction



On Linux/UNIX, when you run the following command to generate a CSR (Certificate Signing Request):

dxcertgen -D {dsaname} Z SHA256 -k 2048 certreq

It may fail to execute with following:

 

Generating DXserver personalities from server files... 

 

Generating a new personality certificate signing req for {dsaname}... 

! Generating a 2048-bit RSA public/private key pair... 

.......+++ 

...+++ 

Generating an x509 v3 certificate signing request... 

Error: BIO_write_filename() failed 

Error: opensslGenerateCertificateSigningRequest({dsaname}) failed 

 

dxcertgen certreq failed. 

Environment

Release: ETRDIR99000-12.5-Directory
Component:

Resolution

Most probably you had run the same command previously as another user (e.g. as 'root' while this time around running as 'dsa' user). Doing so, the previous left behind .csr file owned by 'root' user cannot be overwritten by 'dsa' user hence the problem.

Delete the existing .csr file and re-run of command should be successful to generate a new .csr file.