A question about AmiSSL:openssl.cnf or rather lack thereof

OpenSSL command line function ask for AmiSSL:openssl.cnf nut the is file does not exist.

I see fixed bug refering to the path to this file, ie so that it's correctly looked for at AmiSSL: not AmiSSL:/ but the file itself still does not exist.

Should this have been in the distro ? Can I drop in a generic one? From whence would the best template be found?

I want to create some local certs for a server program I'm working on, I did want to try TLS-PSK to avoid the difficulties of self signed certs but I realised that python doesn't support this and one of the potential clients was to be written in it.

@broadblues

No, we've never included one - users are free to create their own, but generally Amiga applications provide their own configuration, so it perhaps is not necessary in most cases.

There is a sample at https://github.com/jens-maus/amissl/bl ... /openssl/apps/openssl.cnf if it is any use. To be honest though, I've never really tried messing with those config files.

@Futaura

Thanks

Had to tweek the HOME path related bits and then the OpenSSL command stopped complaining and I got myself a cert and key

@broadblues

Ah, ok - perhaps I should include it with the next release then. Obviously, only if it doesn't already exist. Just need to check if it interferes with Amiga apps.

What was the OpenSSL command line that you used to create the cert and key?

Just discovered I had put a vanilla copy of openssl.cnf in AmiSSL: on my install 14 months ago and completely forgotten about it since then! :)

Since that didn't interfere with IBrowse, or seemingly anything else, since then, I'll add a modified openssl.cnf to the AmiSSL installation.

Quote:
Sounds reasonable. thank you.

@Futaura

That's cool. Saves abit of googling at lest

My server is working BTW

17.Programing:Projects/NetRexx> python test_ssl.py
OK 202


/C=UK/ST=United Kindom/CN=X1000/emailAddress=x1000@broad.ology.org.uk
/C=UK/ST=United Kindom/CN=X1000/emailAddress=x1000@broad.ology.org.uk
Wrote login

EXEC
AUTH: 9Pp59A3nJ2l30t9Qd9n3O0yXjCA26orX2Wow6tV1ijXgAmhPrPw31s7pX7I791bf
SIZE: 17
ADDRESS: WORKBENCH
RESULT: YES

WINDOW RAM:T OPEN

The CA.pl helper script would possibly have been useful here too. AmiSSL 4.9 will come with that too, as well as openssl.cnf.