Openssl csr creation fails on VR/VLR

Products

• VMware Live Recovery

Issue/Introduction

Creating csr file using command below fail.

openssl req -new -newkey rsa:4096 -nodes -keyout production.local.key -out production.local.csr

Can't open "/usr/lib/ssl/openssl.cnf" for reading, No such file or directory
C0211AA4C07F0000:error:80000002:system library:BIO_new_file:No such file or directory:crypto/bio/bss_file.c:67:calling fopen(/usr/lib/ssl/openssl.cnf, r)
C0211AA4C07F0000:error:10000080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:75:

Environment

vSphere Replication 9.0.x

Site Recovery Manager 9.0.x

Cause

"openssl.cnf" file and ssl folder not present in default location.

 

Resolution

1. Take a snapshot of VR/SRM

2. Connect to VR/SRM using putty or other ssh client.

3. Initial login should be "admin". Next user should be changed to "root" using command below:

su root

4. Change directory to /usr/lib  and create missing directory. 

cd /usr/lib

mkdir ssl

4. Find openssl.cnf location.

find / -iname openssl.cnf

5. Copy the file to location listed in the error.

cp /etc/ssl/openssl.cnf /usr/lib/ssl/

Location /etc/ssl/openssl.cnf is an example. Above command need to be modified based on the output from step 4

6. Create csr file

openssl req -new -newkey rsa:4096 -nodes -keyout production.local.key -out production.local.csr