Failed to Generate an OpenSSL Certificate When Deploying Nginx on a VM During vKAE Deployment

Symptom

During vKAE deployment and Nginx deployment on a VM, the following information is displayed when an OpenSSL certificate is to be generated:

1

unable to find 'distinguished_name' in config

Key Process and Cause Analysis

The command for generating an OpenSSL certificate conflicts with the export OPENSSL_CONF=/home/openssl.cnf command used to verify the KAE performance during vKAE deployment on VMs. You need to cancel the setting of the OPENSSL_CONF environment variable in the current environment.

Conclusion and Solution

1. Cancel the setting of the OPENSSL_CONF environment variable in the current environment.

   unset OPENSSL_CONF

2. Regenerate an OpenSSL certificate.

   openssl req -new -key server_2048.key -out server_2048.csr