Error while creating a CSR

问题

During the creation of self-signed certificate using OpenSSL command line tool, i'm encountered with an error

First I created a private key

openssl genrsa -out MyKey1.key 2048

While creating a CSR i'm getting an error

openssl req -new -out MyCert1.req -key MyKey1.key -subj /CN=Description of the Server

Error is

problem creating object tsa-policy1=1.2.3.4.1

5364:error:08064066:object identifier routines:OBJ_create:pid exists:crypto\objects\obj_dat.c:689:

Is there something i'm missing here ?

回答1:

I had this same problem while creating a self signed certificate... setting these two environment variables fixed it!

set RANDFILE=c:\demo\.rnd
set OPENSSL_CONF=C:\OpenSSL-Win32\bin\openssl.cfg

I found the solution in this blog post

回答2:

1. Close the current cmd window and open new cmd window.

2. Continue from the second "req" step.

回答3:

I had the same issue when creating client certificate request on Windows platform. Run application as Administrator solves the problem.

来源：https://stackoverflow.com/questions/41743073/error-while-creating-a-csr