ola! I have this error that I am having a problem deciphering. please help /etc/pki/CA/index.txt: No such file or directory unable to open '/etc/pki/CA/index.txt' 139879468582752:error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('/etc/pki/CA/index.txt','r') 139879468582752:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400: Testing certificate for hmis_server.{MY_DOMAIN}. Error opening certificate file /etc/ssl/certs/hmis_server.ghealth.crt.pem 139872843011936:error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('/etc/ssl/certs/hmis_server.ghealth.crt.pem','r') 139872843011936:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400: unable to load certificate here's the script that created that monster #!/bin/csh -f echo "Creating a certificate signing request (CSR)." openssl req \ -nodes -new -days 3650 \ -subj "${DEFAULT_ATTRIBUTES}/CN=${SERVER_NAME}.${MY_DOMAIN}" \ -keyout /etc/ssl/private/${SERVER_NAME}.${MY_DOMAIN}.key.pem \ -out /etc/ssl/req/${SERVER_NAME}.${MY_DOMAIN}.req.pem echo "Testing the newly created CSR." openssl req -text -verify -noout -in /etc/ssl/req/${SERVER_NAME}.${MY_DOMAIN}.req.pem echo "Check for errors, press [Enter] to continue..." read x echo "Signing CSR for ${SERVER_NAME}.${MY_DOMAIN}." openssl ca \ -out /etc/ssl/certs/${SERVER_NAME}.${MY_DOMAIN}.crt.pem \ -in /etc/ssl/req/${SERVER_NAME}.${MY_DOMAIN}.req.pem \ -cert /etc/ssl/cacerts/ca.${MY_DOMAIN}.cacrt.pem \ -keyfile /etc/ssl/private/ca.${MY_DOMAIN}.cakey.pem echo "Testing certificate for ${SERVER_NAME}.${MY_DOMAIN}." openssl verify \ -CAfile /etc/ssl/cacerts/ca.${MY_DOMAIN}.cacrt.pem \ /etc/ssl/certs/${SERVER_NAME}.${MY_DOMAIN}.crt.pem echo "Check for errors, press [Enter] to continue..." read x echo "Creating bundle for ${SERVER_NAME}.${MY_DOMAIN}." cat /etc/ssl/private/${SERVER_NAME}.${MY_DOMAIN}.key.pem \ /etc/ssl/certs/${SERVER_NAME}.${MY_DOMAIN}.crt.pem \ > /etc/ssl/private/${SERVER_NAME}.${MY_DOMAIN}.key+crt.pem echo "Creating DH parameter file for ${SERVER_NAME}.${MY_DOMAIN}." openssl dhparam -check -text -5 512 -out /etc/ssl/dh/${SERVER_NAME}.${MY_DOMAIN}.dh ------------------- help? -- __________________________________________________________________________ Out of clutter, find simplicity. From discord, find harmony. In the middle of difficulty, lies opportunity ~Albert Einstein Eva Kimathi