blocks|key|2831729|text|安装OpenSSL后，您需要重新启动计算机并使用Run+As+Administrator。然后它就起作用了。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2831730|entityMap^0|O|K|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

After installing OpenSSL, you need to restart your computer and use <code>Run As Administrator</code>. Then its works.

blocks|key|3044287|text|在Windows7中，我不需要重新启动，只需在管理员模式下运行命令提示符即可。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3044288|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

In Windows 7 I didn't have to restart, simply run command prompt in administrator mode.

blocks|key|3044296|text|您应该指定配置的绝对路径，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3044297|openssl+req+-x509+-config+"C:\OpenSSL-Win64\bin\openssl.cnf"+...|code-block|syntax|javascript|3044298|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You should specify the absolute path to the config, something like this:

<pre><code>openssl req -x509 -config "C:\OpenSSL-Win64\bin\openssl.cnf" ...
</code></pre>

blocks|key|198338|text|在安装OpenSSL之后，我需要创建一个新的环境变量：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|198339|198340|名称：OPENSSL_CONF|unordered-list-item|offset|length|style|CODE|198341|Value：C:\Program+Files\OpenSSL\openssl.cnf|198342|198343|在powershell中：|198344|$env:OPENSSL_CONF+=+"${env:ProgramFiles}\OpenSSL\openssl.cnf"|code-block|syntax|javascript|198345|这个值与以前的安装版本不同(在本文的前一次编辑中可以看到)。此外，不要忘记将openssl二进制文件夹${env:ProgramFiles}\OpenSSL添加到您的路径中。|198346|entityMap^0|0|0|3|C|0|6|10|0|0|0|0|1F|R|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|Z|8|@$F|10|G|11|H|I]]|9|@]|A|$]]|$1|J|3|K|5|E|7|12|8|@$F|13|G|14|H|I]]|9|@]|A|$]]|$1|L|3|-4|5|6|7|15|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|16|8|@]|9|@]|A|$]]|$1|O|3|P|5|Q|7|17|8|@]|9|@]|A|$R|S]]|$1|T|3|U|5|6|7|18|8|@$F|19|G|1A|H|I]]|9|@]|A|$]]|$1|V|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|W|$]]

After installing OpenSSL I was required to create a new environment variable:

<ul>
<li>Name: <code>OPENSSL_CONF</code></li>
<li>Value: <code>C:\Program Files\OpenSSL\openssl.cnf</code></li>
</ul>

In powershell:

<pre><code>$env:OPENSSL_CONF = "${env:ProgramFiles}\OpenSSL\openssl.cnf"
</code></pre>

This value differs from previous installation versions (as seen in a previous edit of this post). Also, don't forget to add the openssl binary folder <code>${env:ProgramFiles}\OpenSSL</code> to your Path.

blocks|key|203004|text|在windows中，使用类似的scenario|type|unstyled|depth|inlineStyleRanges|entityRanges|data|203005|我也面临着同样的问题，但它是在请求证书签名请求期间发生的。|203006|我做了下面的工作，它对我很有效。|203007|安装OpenSSL后，在系统reboot.for尽力而为后，以管理员身份运行命令提示符。以管理员身份运行并重新启动系统|203008|did，1.错误案例|203009|C:\OpenSSL-Win64\bin>openssl+req+-new+-key+server.key+-out+server.csr|code-block|syntax|javascript|203010|警告:无法打开配置文件:+C:\OpenSSL-Win64\bin\openssl.cnf，并且无法从C:\OpenSSL-Win64\bin\openssl.cnf加载配置信息|203011|2.带着警告工作|203012|C:\OpenSSL-Win64\bin>+openssl+req+-new+-key+server.key+-out+server.csr+-config+C:\OpenSSL-Win64\bin\openssl.cfg|203013|203014|警告消息:警告:无法打开配置文件:+C:\OpenSSL-Win64\bin\openssl.cnf|blockquote|203015|203016|203017|但是提示我使用server.key+It+的Pass+Phrase为我工作的。|offset|length|style|BOLD|203018|我引用了这个link作为我的帮助。|203019|谢谢。|203020|entityMap|0|LINK|mutability|MUTABLE|url|http://www.akadia.com/services/ssh_test_certificate.html|1^0|0|0|0|0|0|0|0|0|0|0|0|0|0|L|H|M|B|0|0|6|4|1|0|0^^$0|@$1|2|3|4|5|6|7|1J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|1M|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|1N|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|1O|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|1P|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|S|3|T|5|L|7|1R|8|@]|9|@]|A|$M|N]]|$1|U|3|-4|5|6|7|1S|8|@]|9|@]|A|$]]|$1|V|3|W|5|X|7|1T|8|@]|9|@]|A|$]]|$1|Y|3|-4|5|6|7|1U|8|@]|9|@]|A|$]]|$1|Z|3|-4|5|6|7|1V|8|@]|9|@]|A|$]]|$1|10|3|11|5|6|7|1W|8|@$12|1X|13|1Y|14|15]]|9|@$12|1Z|13|20|1|21]]|A|$]]|$1|16|3|17|5|6|7|22|8|@]|9|@$12|23|13|24|1|25]]|A|$]]|$1|18|3|19|5|6|7|26|8|@]|9|@]|A|$]]|$1|1A|3|-4|5|6|7|27|8|@]|9|@]|A|$]]]|1B|$1C|$5|1D|1E|1F|A|$1G|1H]]|1I|$5|1D|1E|1F|A|$1G|1H]]]]

In windows , [Similar scenario] 

I was facing the same problem But It was during requesting for Certificate Signing Request.

I did the below , It Worked for me.

Once OpenSSL installed, Ran command prompt as administrator after the system reboot.[for the best I did both.. run as admin and system reboot]

did,
1.[Error Case]

<pre><code>C:\OpenSSL-Win64\bin&gt;openssl req -new -key server.key -out server.csr
</code></pre>

WARNING: can't open config file: C:\OpenSSL-Win64\bin\openssl.cnf
AND
Unable to load config info from C:\OpenSSL-Win64\bin\openssl.cnf

2.[Worked with Warning]

<pre><code>C:\OpenSSL-Win64\bin&gt; openssl req -new -key server.key -out server.csr -config C:\OpenSSL-Win64\bin\openssl.cfg
</code></pre>

<blockquote>
 [Warning message]: WARNING: can't open config file: C:\OpenSSL-Win64\bin\openssl.cnf
</blockquote>

But prompted me for the <a href="http://www.akadia.com/services/ssh_test_certificate.html">Pass Phrase</a> for server.key 
It worked for me.

I referred,This <a href="http://www.akadia.com/services/ssh_test_certificate.html">link</a> for my assistance. 

Thank you.

blocks|key|200697|text|使用GnuWin32工具，我在C：\gnuwin32\+openssl.cnf下找到了共享|type|unstyled|depth|inlineStyleRanges|entityRanges|data|200698|set+OPENSSL_CONF=C:\gnuwin32\share\openssl.cnf|code-block|syntax|javascript|200699|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

With the GnuWin32 tools I found the openssl.cnf under C:\gnuwin32\share

<pre><code>set OPENSSL_CONF=C:\gnuwin32\share\openssl.cnf
</code></pre>

blocks|key|2831873|text|对我来说，在Windows8上，我只是找到了openssl.cnf文件并将其复制到了C盘上。然后：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2831874|openssl+req+-new+-key+server.key+-out+server.csr+-config+C:\openssl.cnf|code-block|syntax|javascript|2831875|工作得很完美。|2831876|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

For me on Windows 8, I simply found openssl.cnf file and copied it on the C drive. then:

<pre><code>openssl req -new -key server.key -out server.csr -config C:\openssl.cnf
</code></pre>

Worked perfectly.

blocks|key|201392|text|对我来说，在调用之前放入变量完成了这项工作：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|201393|OPENSSL_CONF=/usr/ssl/openssl.cnf+openssl+req+-new+-x509+-key+privatekey.pem+-out+publickey.cer+-days+365|code-block|syntax|javascript|201394|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

For me put variable before calling did the trick:

<pre><code>OPENSSL_CONF=/usr/ssl/openssl.cnf openssl req -new -x509 -key privatekey.pem -out publickey.cer -days 365
</code></pre>

blocks|key|2831928|text|在这种情况下，唯一适用于我的文件是自创建的+openssl.cnf+文件。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|2831929|以下是本练习所需的基础知识(根据需要进行编辑)：|2831930|#
#+OpenSSL+configuration+file.
#

#+Establish+working+directory.

dir+++++++++++++++++++++++++=+.

[+ca+]
default_ca++++++++++++++++++=+CA_default

[+CA_default+]
serial++++++++++++++++++++++=+$dir/serial
database++++++++++++++++++++=+$dir/certindex.txt
new_certs_dir+++++++++++++++=+$dir/certs
certificate+++++++++++++++++=+$dir/cacert.pem
private_key+++++++++++++++++=+$dir/private/cakey.pem
default_days++++++++++++++++=+365
default_md++++++++++++++++++=+md5
preserve++++++++++++++++++++=+no
email_in_dn+++++++++++++++++=+no
nameopt+++++++++++++++++++++=+default_ca
certopt+++++++++++++++++++++=+default_ca
policy++++++++++++++++++++++=+policy_match

[+policy_match+]
countryName+++++++++++++++++=+match
stateOrProvinceName+++++++++=+match
organizationName++++++++++++=+match
organizationalUnitName++++++=+optional
commonName++++++++++++++++++=+supplied
emailAddress++++++++++++++++=+optional

[+req+]
default_bits++++++++++++++++=+1024++++++++++#+Size+of+keys
default_keyfile+++++++++++++=+key.pem+++++++#+name+of+generated+keys
default_md++++++++++++++++++=+md5+++++++++++++++#+message+digest+algorithm
string_mask+++++++++++++++++=+nombstr+++++++#+permitted+characters
distinguished_name++++++++++=+req_distinguished_name
req_extensions++++++++++++++=+v3_req

[+req_distinguished_name+]
#+Variable+name+++++++++++++Prompt+string
#-------------------------++++----------------------------------
0.organizationName++++++++++=+Organization+Name+(company)
organizationalUnitName++++++=+Organizational+Unit+Name+(department,+division)
emailAddress++++++++++++++++=+Email+Address
emailAddress_max++++++++++++=+40
localityName++++++++++++++++=+Locality+Name+(city,+district)
stateOrProvinceName+++++++++=+State+or+Province+Name+(full+name)
countryName+++++++++++++++++=+Country+Name+(2+letter+code)
countryName_min+++++++++++++=+2
countryName_max+++++++++++++=+2
commonName++++++++++++++++++=+Common+Name+(hostname,+IP,+or+your+name)
commonName_max++++++++++++++=+64

#+Default+values+for+the+above,+for+consistency+and+less+typing.
#+Variable+name+++++++++++++Value
#------------------------+++++------------------------------
0.organizationName_default++=+My+Company
localityName_default++++++++=+My+Town
stateOrProvinceName_default+=+State+or+Providence
countryName_default+++++++++=+US

[+v3_ca+]
basicConstraints++++++++++++=+CA:TRUE
subjectKeyIdentifier++++++++=+hash
authorityKeyIdentifier++++++=+keyid:always,issuer:always

[+v3_req+]
basicConstraints++++++++++++=+CA:FALSE
subjectKeyIdentifier++++++++=+hash|code-block|syntax|javascript|2831931|我希望这能有所帮助。|2831932|entityMap^0|7|U|0|0|O|0|0|0|A|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|T|8|@$9|U|A|V|B|C]]|D|@]|E|$]]|$1|H|3|I|5|J|7|W|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|X|8|@$9|Y|A|Z|B|C]]|D|@]|E|$]]|$1|O|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|P|$]]

The only thing that worked for me in this situation was the self-created openssl.cnf file.

Here are the basics needed for this exercise (edit as needed):

<pre><code>#
# OpenSSL configuration file.
#

# Establish working directory.

dir = .

[ ca ]
default_ca = CA_default

[ CA_default ]
serial = $dir/serial
database = $dir/certindex.txt
new_certs_dir = $dir/certs
certificate = $dir/cacert.pem
private_key = $dir/private/cakey.pem
default_days = 365
default_md = md5
preserve = no
email_in_dn = no
nameopt = default_ca
certopt = default_ca
policy = policy_match

[ policy_match ]
countryName = match
stateOrProvinceName = match
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional

[ req ]
default_bits = 1024 # Size of keys
default_keyfile = key.pem # name of generated keys
default_md = md5 # message digest algorithm
string_mask = nombstr # permitted characters
distinguished_name = req_distinguished_name
req_extensions = v3_req

[ req_distinguished_name ]
# Variable name Prompt string
#------------------------- ----------------------------------
0.organizationName = Organization Name (company)
organizationalUnitName = Organizational Unit Name (department, division)
emailAddress = Email Address
emailAddress_max = 40
localityName = Locality Name (city, district)
stateOrProvinceName = State or Province Name (full name)
countryName = Country Name (2 letter code)
countryName_min = 2
countryName_max = 2
commonName = Common Name (hostname, IP, or your name)
commonName_max = 64

# Default values for the above, for consistency and less typing.
# Variable name Value
#------------------------ ------------------------------
0.organizationName_default = My Company
localityName_default = My Town
stateOrProvinceName_default = State or Providence
countryName_default = US

[ v3_ca ]
basicConstraints = CA:TRUE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always

[ v3_req ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
</code></pre>

I hope that helps.

blocks|key|200748|text|在Windows+10中，不需要重新启动，也不需要在管理员模式下运行，而是像这样设置openssl配置：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|200749|set+OPENSSL_CONF=C:\Program+Files+(x86)\GnuWin32\share\openssl.cnf|code-block|syntax|javascript|200750|当然，如果您使用的是GnuWin32|offset|length|style|CODE|200751|entityMap^0|0|0|A|8|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

In Windows 10, no need to restart nor run in Administrator's mode but instead set openssl config like so:

<pre><code>set OPENSSL_CONF=C:\Program Files (x86)\GnuWin32\share\openssl.cnf
</code></pre>

Of course, if you are using <code>GnuWin32</code>

blocks|key|2831947|text|在我的例子中，我需要使用config选项在命令上手动设置openssl.cnf文件的路径。所以这个命令|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|BOLD|entityRanges|data|2831948|openssl+req+-x509+-config+"C:\Users\sk\Downloads\openssl-0.9.8k_X64\openssl.cnf"+-newkey+rsa:4096+-keyout+key.pem+-out+cert.pem+-nodes+-days+900|code-block|syntax|javascript|2831949|entityMap^0|C|6|S|B|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]|$9|Q|A|R|B|D]]|E|@]|F|$]]|$1|G|3|H|5|I|7|S|8|@]|E|@]|F|$J|K]]|$1|L|3|-4|5|6|7|T|8|@]|E|@]|F|$]]]|M|$]]

In my case, I need to set the path of openssl.cnf file manually on the command using <code>config</code> option. So the command 

<pre><code>openssl req -x509 -config "C:\Users\sk\Downloads\openssl-0.9.8k_X64\openssl.cnf" -newkey rsa:4096 -keyout key.pem -out cert.pem -nodes -days 900
</code></pre>

blocks|key|200773|text|如果您使用的是Win32+OpenSSL+v1.1.0g，请设置以下环境变量：|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|200774|set+OPENSSL_CONF=C:\OpenSSL-Win32\bin\cnf\openssl.cnf|code-block|syntax|javascript|200775|在使用"server.key“运行此命令之前，成功创建了"server.csr”|200776|openssl+req+-new+-key+server.key+-out+server.csr|200777|entityMap^0|7|L|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|P|$]]

If you're using Win32 OpenSSL v1.1.0g, setting up this environment variable:

<pre><code>set OPENSSL_CONF=C:\OpenSSL-Win32\bin\cnf\openssl.cnf
</code></pre>

Before running this command with "server.key", successfully creating "server.csr":

<pre><code>openssl req -new -key server.key -out server.csr
</code></pre>

blocks|key|203178|text|关于为什么找不到openssl这个基本问题:简短的回答:+openssl的一些安装包预先包含了一个默认的openssl.cnf。其他包则不能。在后一种情况下，您将包含下面显示的链接中的一个；您可以根据需要输入其他特定于用户的信息--DN名称等。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|203179|直接从https://www.openssl.org/docs/manmaster/man5/config.html,I报价：|offset|length|203180|"OPENSSL库配置|203181|应用程序可以使用主OpenSSL配置文件或可选的替代配置文件自动配置OpenSSL的某些方面。openssl实用程序包括此功能:任何子命令都使用主OpenSSL配置文件，除非在子命令中使用了一个选项来使用替代配置文件。|203182|要启用库配置，缺省部分需要包含指向主配置部分的适当行。缺省名称是openssl实用程序使用的openssl_conf。其他应用程序可能会使用替代名称，如myapplication_conf。所有库配置行都显示在配置文件开头的default部分中。|203183|配置部分应该由一组名称值对组成，这些名称值对包含特定的模块配置信息。该名称表示配置模块的名称。该值的含义是特定于模块的:例如，它可以表示包含特定于配置模块的信息的另一个配置节。例如：“|203184|因此，似乎必须根据您的唯一判别名(DN)以及特定于您的使用的其他条目自行配置openssl.cnf。|203185|Here是一个模板文件，您可以从该文件中生成包含特定条目的openssl.cnf。|203186|One+Application实际上有一个演示安装，其中包括一个演示.cnf文件。|203187|此外，如果需要以编程方式访问.cnf文件，可以包含适当的头文件--openssl/conf.h--并使用以下命令解析.cnf文件|203188|CONF_modules_load_file(const+char+*filename,+const+char+*appname,
++++++++++++++++++++++++++++unsigned+long+flags);|code-block|syntax|javascript|203189|Here是“CONF_modules_load_file”的文档；|203190|entityMap|0|LINK|mutability|MUTABLE|url|https://www.openssl.org/docs/manmaster/man5/config.html,I|1|https://github.com/openssl/openssl/blob/master/apps/openssl.cnf|2|https://www.microfocus.com/documentation/enterprise-developer/ed40pu3/ED-VS2017/HROSSROPEN02.html|3|https://www.openssl.org/docs/manmaster/man3/CONF_modules_load.html^0|0|3|1L|0|0|0|0|0|0|0|0|4|1|0|0|F|2|0|0|0|0|4|3|0^^$0|@$1|2|3|4|5|6|7|1G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1H|8|@]|9|@$D|1I|E|1J|1|1K]]|A|$]]|$1|F|3|G|5|6|7|1L|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|1M|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1N|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|1O|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|1P|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1Q|8|@]|9|@$D|1R|E|1S|1|1T]]|A|$]]|$1|R|3|S|5|6|7|1U|8|@]|9|@$D|1V|E|1W|1|1X]]|A|$]]|$1|T|3|U|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|V|3|W|5|X|7|1Z|8|@]|9|@]|A|$Y|Z]]|$1|10|3|11|5|6|7|20|8|@]|9|@$D|21|E|22|1|23]]|A|$]]|$1|12|3|-4|5|6|7|24|8|@]|9|@]|A|$]]]|13|$14|$5|15|16|17|A|$18|19]]|1A|$5|15|16|17|A|$18|1B]]|1C|$5|15|16|17|A|$18|1D]]|1E|$5|15|16|17|A|$18|1F]]]]

On the basic question of why openssl is not found:
Short answer:Some installation packages for openssl have a default openssl.cnf pre-included. Other packages do not.
In the latter case you will include one from the link shown below;
You can enter additional user-specifics --DN name,etc-- as needed.

From <a href="https://www.openssl.org/docs/manmaster/man5/config.html,I" rel="nofollow noreferrer">https://www.openssl.org/docs/manmaster/man5/config.html,I</a> quote directly:

"OPENSSL LIBRARY CONFIGURATION

Applications can automatically configure certain aspects of OpenSSL using the master OpenSSL configuration file, or optionally an alternative configuration file. The openssl utility includes this functionality: any sub command uses the master OpenSSL configuration file unless an option is used in the sub command to use an alternative configuration file.

To enable library configuration the default section needs to contain an appropriate line which points to the main configuration section. The default name is openssl_conf which is used by the openssl utility. Other applications may use an alternative name such as myapplication_conf. All library configuration lines appear in the default section at the start of the configuration file.

The configuration section should consist of a set of name value pairs which contain specific module configuration information. The name represents the name of the configuration module. The meaning of the value is module specific: it may, for example, represent a further configuration section containing configuration module specific information. E.g.:"

So it appears one must self configure openssl.cnf according to your
Distinguished Name (DN), along with other entries specific to your use.

<a href="https://github.com/openssl/openssl/blob/master/apps/openssl.cnf" rel="nofollow noreferrer">Here</a> is the template file from which you can generate openssl.cnf
with your specific entries.

<a href="https://www.microfocus.com/documentation/enterprise-developer/ed40pu3/ED-VS2017/HROSSROPEN02.html" rel="nofollow noreferrer">One Application</a> actually has a demo installation that includes a demo .cnf file.

Additionally, if you need to programmatically access .cnf files, you can
include appropriate headers --openssl/conf.h-- and parse your .cnf files
using 

<pre><code>CONF_modules_load_file(const char *filename, const char *appname,
 unsigned long flags);
</code></pre>

<a href="https://www.openssl.org/docs/manmaster/man3/CONF_modules_load.html" rel="nofollow noreferrer">Here</a> are docs for "CONF_modules_load_file";

blocks|key|2832056|text|在Windows+Powershell上：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2832057|$env:OPENSSL_CONF+=+"${env:ProgramFiles}\OpenSSL-Win64\bin\openssl.cfg"|code-block|syntax|javascript|2832058|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

On Windows Powershell:

<pre><code>$env:OPENSSL_CONF = "${env:ProgramFiles}\OpenSSL-Win64\bin\openssl.cfg"
</code></pre>

blocks|key|200856|text|我在Windows+7上也遇到了类似的问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|200857|WARNING:+can't+open+config+file:+C:\OpenSSL-Win32\bin\openssl.cfg
Unable+to+load+config+info+from+C:\OpenSSL-Win32\bin\openssl.cfg|code-block|syntax|javascript|200858|原因是在未使用卸载程序的情况下删除了OpenSSL-Win32目录，因此并未从系统中正确删除所有组件。我不得不手动删除OPENSSL_CONF的环境变量。|offset|length|style|CODE|BOLD|200859|一些openssl二进制文件，例如与git一起安装，不需要OPENSSL_CONF环境变量，但如果该环境变量存在，它必须导致有效的文件。|200860|entityMap^0|0|0|I|D|1N|C|1N|C|0|T|C|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|S|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|T|8|@$I|U|J|V|K|L]|$I|W|J|X|K|L]|$I|Y|J|Z|K|M]]|9|@]|A|$]]|$1|N|3|O|5|6|7|10|8|@$I|11|J|12|K|L]]|9|@]|A|$]]|$1|P|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|Q|$]]

I had similar problem on Windows 7:
<pre><code>WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
Unable to load config info from C:\OpenSSL-Win32\bin\openssl.cfg
</code></pre>
The reason was removed <code>OpenSSL-Win32</code> directory without using deinstallator, so not all components was properly removed from system.
I had to remove environment variable <code>OPENSSL_CONF</code> manually.
Some openssl binaries, e.g. installed with git, does not need <code>OPENSSL_CONF</code> environment variable, but if this environment variable exists it must lead to valid file.

While using OpenSSL on Windows:

<code>openssl genrsa -out privatekey.pem 1024 --&gt;</code>

Created successfully

<pre><code>openssl req -new -x509 -key privatekey.pem -out publickey.cer -days 365 
----&gt;
</code></pre>

Showing error message as 

<blockquote>
 unable to load config info from /usr/local/ssl/openssl.cnf
</blockquote>

Unable to load config info from /usr/local/ssl/openssl.cnf on Windows

5位重磅专家聚焦 AI 时代开发者核心成长需求，带你深入解锁全栈进化、人机协作关键路径！点击报名到场：<a href="https://cloud.tencent.com/developer/salon/salon-2403/signup" target="_blank">https://cloud.tencent.com/developer/salon/salon-2403/signup</a> 
 <img src="https://qcloudimg.tencent-cloud.cn/raw/487c82639d2338df3ef66dfb1450601a.png"/>

腾讯技术创作特训营「年度论坛」正在报名中！

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

在Windows上使用OpenSSL时：openssl genrsa -out privatekey.pem 1024 -->创建成功openssl req -new -x509 -key privatekey.pem -out publickey.cer -days 365 ---->将错误消息显示为无法从/usr/...

问无法从Windows上的/usr/local/ssl/openssl.cnf加载配置信息
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问无法从Windows上的/usr/local/ssl/openssl.cnf加载配置信息EN