Can't load certificate

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












When I am trying to sign my cert I keep getting this error



[root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles 
requests/testcsr.pem
Using configuration from /etc/pki/tls/openssl.cnf
unable to load certificate
139675024402320:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE


I have check that the cacert.pem is not corrupted, serial has number in the file, permissions are 755



What would be causing this problem?




openssl certificates




share|improve this question

















  • 1




    no start line message means openssl counldn't find headers ----- BEGIN RSA ... -----. I bet that your requests/testcsr.pem is ill-formed.
    – Kamil Cuk
    Jun 22 at 15:47










  • the CSR has -----BEGIN CERTIFICATE REQUEST----- -----END CERTIFICATE REQUEST-----
    – user3071814
    Jun 22 at 19:29











  • The file /etc/pki/tls/openssl.cnf will have a section for the CA, within which should be an option called certificates. Check that the file pointed to by this option is well formed as @KamilCuk suggests.
    – garethTheRed
    Jun 24 at 6:59











  • This is what is in the openssl.cnf certificate = $dir/cacert.pem # The CA certificate [root@xxxxxxx CA]# ls -l total 12 -rwxr-xr-x. 1 root root 1675 Jun 21 14:09 cacert.pem -rwxr-xr-x. 1 root root 3604 Jun 22 14:13 CA.pem drwxr-xr-x. 2 root root 6 Jun 20 11:29 certs drwxr-xr-x. 2 root root 6 Dec 13 2017 crl -rwxr-xr-x. 1 root root 0 Jun 21 11:25 index.txt drwxr-xr-x. 2 root root 6 Jun 21 14:03 newcerts drwxr-xr-x. 2 root root 46 Jun 22 13:53 private drwxr-xr-x. 2 root root 24 Jun 22 13:34 requests -rwxr-xr-x. 1 root root 5 Jun 21 11:26 serial
    – user3071814
    Jun 25 at 12:54















up vote
0
down vote

favorite












When I am trying to sign my cert I keep getting this error



[root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles 
requests/testcsr.pem
Using configuration from /etc/pki/tls/openssl.cnf
unable to load certificate
139675024402320:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE


I have check that the cacert.pem is not corrupted, serial has number in the file, permissions are 755



What would be causing this problem?




openssl certificates




share|improve this question

















  • 1




    no start line message means openssl counldn't find headers ----- BEGIN RSA ... -----. I bet that your requests/testcsr.pem is ill-formed.
    – Kamil Cuk
    Jun 22 at 15:47










  • the CSR has -----BEGIN CERTIFICATE REQUEST----- -----END CERTIFICATE REQUEST-----
    – user3071814
    Jun 22 at 19:29











  • The file /etc/pki/tls/openssl.cnf will have a section for the CA, within which should be an option called certificates. Check that the file pointed to by this option is well formed as @KamilCuk suggests.
    – garethTheRed
    Jun 24 at 6:59











  • This is what is in the openssl.cnf certificate = $dir/cacert.pem # The CA certificate [root@xxxxxxx CA]# ls -l total 12 -rwxr-xr-x. 1 root root 1675 Jun 21 14:09 cacert.pem -rwxr-xr-x. 1 root root 3604 Jun 22 14:13 CA.pem drwxr-xr-x. 2 root root 6 Jun 20 11:29 certs drwxr-xr-x. 2 root root 6 Dec 13 2017 crl -rwxr-xr-x. 1 root root 0 Jun 21 11:25 index.txt drwxr-xr-x. 2 root root 6 Jun 21 14:03 newcerts drwxr-xr-x. 2 root root 46 Jun 22 13:53 private drwxr-xr-x. 2 root root 24 Jun 22 13:34 requests -rwxr-xr-x. 1 root root 5 Jun 21 11:26 serial
    – user3071814
    Jun 25 at 12:54













up vote
0
down vote

favorite









up vote
0
down vote

favorite











When I am trying to sign my cert I keep getting this error



[root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles 
requests/testcsr.pem
Using configuration from /etc/pki/tls/openssl.cnf
unable to load certificate
139675024402320:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE


I have check that the cacert.pem is not corrupted, serial has number in the file, permissions are 755



What would be causing this problem?




openssl certificates




share|improve this question













When I am trying to sign my cert I keep getting this error



[root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles 
requests/testcsr.pem
Using configuration from /etc/pki/tls/openssl.cnf
unable to load certificate
139675024402320:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE


I have check that the cacert.pem is not corrupted, serial has number in the file, permissions are 755



What would be causing this problem?





openssl certificates





share|improve this question












share|improve this question




share|improve this question








edited Jun 22 at 15:27









Debian_yadav

8322522




8322522









asked Jun 22 at 13:56









user3071814

1




1







  • 1




    no start line message means openssl counldn't find headers ----- BEGIN RSA ... -----. I bet that your requests/testcsr.pem is ill-formed.
    – Kamil Cuk
    Jun 22 at 15:47










  • the CSR has -----BEGIN CERTIFICATE REQUEST----- -----END CERTIFICATE REQUEST-----
    – user3071814
    Jun 22 at 19:29











  • The file /etc/pki/tls/openssl.cnf will have a section for the CA, within which should be an option called certificates. Check that the file pointed to by this option is well formed as @KamilCuk suggests.
    – garethTheRed
    Jun 24 at 6:59











  • This is what is in the openssl.cnf certificate = $dir/cacert.pem # The CA certificate [root@xxxxxxx CA]# ls -l total 12 -rwxr-xr-x. 1 root root 1675 Jun 21 14:09 cacert.pem -rwxr-xr-x. 1 root root 3604 Jun 22 14:13 CA.pem drwxr-xr-x. 2 root root 6 Jun 20 11:29 certs drwxr-xr-x. 2 root root 6 Dec 13 2017 crl -rwxr-xr-x. 1 root root 0 Jun 21 11:25 index.txt drwxr-xr-x. 2 root root 6 Jun 21 14:03 newcerts drwxr-xr-x. 2 root root 46 Jun 22 13:53 private drwxr-xr-x. 2 root root 24 Jun 22 13:34 requests -rwxr-xr-x. 1 root root 5 Jun 21 11:26 serial
    – user3071814
    Jun 25 at 12:54













  • 1




    no start line message means openssl counldn't find headers ----- BEGIN RSA ... -----. I bet that your requests/testcsr.pem is ill-formed.
    – Kamil Cuk
    Jun 22 at 15:47










  • the CSR has -----BEGIN CERTIFICATE REQUEST----- -----END CERTIFICATE REQUEST-----
    – user3071814
    Jun 22 at 19:29











  • The file /etc/pki/tls/openssl.cnf will have a section for the CA, within which should be an option called certificates. Check that the file pointed to by this option is well formed as @KamilCuk suggests.
    – garethTheRed
    Jun 24 at 6:59











  • This is what is in the openssl.cnf certificate = $dir/cacert.pem # The CA certificate [root@xxxxxxx CA]# ls -l total 12 -rwxr-xr-x. 1 root root 1675 Jun 21 14:09 cacert.pem -rwxr-xr-x. 1 root root 3604 Jun 22 14:13 CA.pem drwxr-xr-x. 2 root root 6 Jun 20 11:29 certs drwxr-xr-x. 2 root root 6 Dec 13 2017 crl -rwxr-xr-x. 1 root root 0 Jun 21 11:25 index.txt drwxr-xr-x. 2 root root 6 Jun 21 14:03 newcerts drwxr-xr-x. 2 root root 46 Jun 22 13:53 private drwxr-xr-x. 2 root root 24 Jun 22 13:34 requests -rwxr-xr-x. 1 root root 5 Jun 21 11:26 serial
    – user3071814
    Jun 25 at 12:54








1




1




no start line message means openssl counldn't find headers ----- BEGIN RSA ... -----. I bet that your requests/testcsr.pem is ill-formed.
– Kamil Cuk
Jun 22 at 15:47




no start line message means openssl counldn't find headers ----- BEGIN RSA ... -----. I bet that your requests/testcsr.pem is ill-formed.
– Kamil Cuk
Jun 22 at 15:47












the CSR has -----BEGIN CERTIFICATE REQUEST----- -----END CERTIFICATE REQUEST-----
– user3071814
Jun 22 at 19:29





the CSR has -----BEGIN CERTIFICATE REQUEST----- -----END CERTIFICATE REQUEST-----
– user3071814
Jun 22 at 19:29













The file /etc/pki/tls/openssl.cnf will have a section for the CA, within which should be an option called certificates. Check that the file pointed to by this option is well formed as @KamilCuk suggests.
– garethTheRed
Jun 24 at 6:59





The file /etc/pki/tls/openssl.cnf will have a section for the CA, within which should be an option called certificates. Check that the file pointed to by this option is well formed as @KamilCuk suggests.
– garethTheRed
Jun 24 at 6:59













This is what is in the openssl.cnf certificate = $dir/cacert.pem # The CA certificate [root@xxxxxxx CA]# ls -l total 12 -rwxr-xr-x. 1 root root 1675 Jun 21 14:09 cacert.pem -rwxr-xr-x. 1 root root 3604 Jun 22 14:13 CA.pem drwxr-xr-x. 2 root root 6 Jun 20 11:29 certs drwxr-xr-x. 2 root root 6 Dec 13 2017 crl -rwxr-xr-x. 1 root root 0 Jun 21 11:25 index.txt drwxr-xr-x. 2 root root 6 Jun 21 14:03 newcerts drwxr-xr-x. 2 root root 46 Jun 22 13:53 private drwxr-xr-x. 2 root root 24 Jun 22 13:34 requests -rwxr-xr-x. 1 root root 5 Jun 21 11:26 serial
– user3071814
Jun 25 at 12:54





This is what is in the openssl.cnf certificate = $dir/cacert.pem # The CA certificate [root@xxxxxxx CA]# ls -l total 12 -rwxr-xr-x. 1 root root 1675 Jun 21 14:09 cacert.pem -rwxr-xr-x. 1 root root 3604 Jun 22 14:13 CA.pem drwxr-xr-x. 2 root root 6 Jun 20 11:29 certs drwxr-xr-x. 2 root root 6 Dec 13 2017 crl -rwxr-xr-x. 1 root root 0 Jun 21 11:25 index.txt drwxr-xr-x. 2 root root 6 Jun 21 14:03 newcerts drwxr-xr-x. 2 root root 46 Jun 22 13:53 private drwxr-xr-x. 2 root root 24 Jun 22 13:34 requests -rwxr-xr-x. 1 root root 5 Jun 21 11:26 serial
– user3071814
Jun 25 at 12:54
















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);








 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f451318%2fcant-load-certificate%23new-answer', 'question_page');

);

Post as a guest






















active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes










 

draft saved


draft discarded


























 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f451318%2fcant-load-certificate%23new-answer', 'question_page');

);

Post as a guest
































































-

Popular posts from this blog

Peggy Mitchell

Image
EastEnders character This article is about the soap opera character. For the British tennis player, see Peggy Michell. For the author, see Margaret Mitchell. Peggy Mitchell Barbara Windsor as Peggy Mitchell (2008) EastEnders character Portrayed by Jo Warne (1991) Barbara Windsor (1994–2016) Duration 1991, 1994–2010, 2013–2016 First appearance Episode 650 30 April 1991  ( 1991-04-30 ) Last appearance Episode 5286 17 May 2016  ( 2016-05-17 ) (appearance) Episode 5287 19 May 2016 (voiceover) Introduced by Michael Ferguson (1991) Barbara Emile (1994) Louise Berridge (2004) Kate Harwood (2005) Lorraine Newman (2013) Dominic Treadwell-Collins (2014) Spin-off appearances The Mitchells - Naked Truths (1998) Classification Former; regular Profile Other names Peggy Butcher Occupation Barmaid Businesswoman Pub landlady Jo Warne as Peggy Mitchell (1991) Family Family Mitchell Father Jack Martin Mother Lily Martin Sisters Aunt ...
Read more

Palaiologos

Image
Palaiologos Παλαιολόγος Palaeologus, Palaeologue Imperial Family Double-headed eagle with the family cypher Country Byzantine Empire, Duchy of Montferrat (remaining lineage after Empire annexed by Ottomans) Founded 11th century  ( 11th century ) Founder Nikephoros Palaiologos (first known) Final ruler Constantine XI Palaiologos (Byzantine Empire) Margaret Paleologa (Montferrat) Titles Byzantine Emperor Marquess of Montferrat Style(s) "Augustus" "Basileus" "Autokrator" Traditions Greek Orthodoxy (predominantly) Roman Catholicism (remaining lineage in Montferrat) Dissolution 1533  ( 1533 ) Cadet branches Claimants: House of Kastrioti (defunct) House of Rurik (defunct) Palaiologan dynasty Chronology Michael VIII 1259–1282 with Andronikos II as co-emperor, 1261–1282 Andronikos II 1282–1328 with Michael IX (1294–1320) and Andronikos III (1321–1328) as co-emperors Andronikos III 1328–1341 John...
Read more

The Forum (Inglewood, California)

Image
The Forum "LA Forum" Prairie Ave. façade of The Forum in 2014 Full name The Forum, presented by Chase Former names The Forum (1967–1988) Great Western Forum (1988–2003) Address 3900 W. Manchester Blvd Location Inglewood, California Coordinates Coordinates: 33°57′29″N 118°20′31″W  /  33.95806°N 118.34194°W  / 33.95806; -118.34194 Public transit     Downtown Inglewood station Owner The Madison Square Garden Company Operator MSG Entertainment Seating type Reserved Capacity 17,500 Half-bowl: 8,000 Construction Broke ground July 1, 1966  ( 1966-07-01 ) Opened December 30, 1967  ( 1967-12-30 ) Renovated 1988, 2012–2014 Construction cost $16 million Renovation: 2014: $76.5 million Architect Charles Luckman Associates (original) Brisbin Brook Beynon (renovation) Structural engineer Johnson & Nielsen Associates (original) Severud Associates (renovation) Genera...
Read more