创建自签名 SSL 证书时出错

Question

我尝试根据 Security key and cert for mosca MQTT broker 中 link 中的说明创建自签名证书。

$ openssl genrsa -des3 -out tls-key.pem 1024 (works fine)

$ openssl req -new -key tlk-key -out server.csr (returns error)

cygwin 上的错误看起来像这样；

Error opening Private Key tlk-key 6870300:error:02001002:system library:fopen:No such file or directory:bss_file.c:391:fopen('tlk-key','rb') 6870300:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:393: unable to load Private Key

在 Ubuntu 16.04 上，错误如下所示；

Error opening Private Key tlk-key 140137729443480:error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('tlk-key','r') 140137729443480:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400: unable to load Private Key

我尝试使用 cygwin 和 Ubuntu。谁能告诉我哪里出了问题？

编辑：在得到 Steffen Ullrich 的回答后，我尝试了下面的命令。它仍然是 returns 一个错误。

$ openssl req -new -key tlk-key.pem -out server.csr

Error opening Private Key tlk-key.pem 6870300:error:02001002:system library:fopen:No such file or directory:bss_file.c:391:fopen('tlk-key.pem','rb') 6870300:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:393: unable to load Private Key

Answer 1

您创建了密钥文件 tls-key.pem，但随后尝试使用不存在的文件 tlk-key 而不是您创建的文件：

$ openssl genrsa -des3 -out tls-key.pem 1024 (works fine)
                            ^^^^^^^^^^^^
$ openssl req -new -key tlk-key -out server.csr (returns error)
                        ^^^^^^^

创建自签名 SSL 证书时出错

Error while creating self-signed SSL certificate

security

ssl

openssl

certificate

ssl-certificate