0

I'm trying to run the server code provided by wolfSSL here https://www.wolfssl.com/documentation/ssl-tutorial-2.3.zip, but I get this error:

Error loading ../certs/ca-cert.pem, please check the file.

So, I checked that file and it's past its expiry date. I tried to renew the certificate by following this answer, but when I run:

openssl x509 -x509toreq -in ca-cert.pem -out ca-cert.csr -signkey ca-cert.pem

I get this error:

unable to load request key
140640989897152:error:0909006C:PEM routines:get_name:no start line:../crypto/pem/pem_lib.c:745:Expecting: ANY PRIVATE KEY

I'm not sure what to do. Any help is appreciated.

  • You don't have the (private)key for the CA in that zip, so you can't 'renew' it. Specifically, you told it to use the key from `ca-cert.pem` but there is no key in that file, so it gives the error you got. Just create a whole new set of CA key&cert and server key&cert, or if you really want 'official fake'(!) ones, there are up-to-date (and more extensive) versions at https://github.com/wolfSSL/wolfssl-examples/tree/master/certs – dave_thompson_085 Jan 12 '22 at 18:40

0 Answers0