openssl TXT_DB error number 2 failed to update database

最新推荐文章于 2021-01-27 12:36:03 发布

清风的BLOG

最新推荐文章于 2021-01-27 12:36:03 发布

阅读量639

点赞数

分类专栏： Linux 应用系统 Linux 系统配置应用服务文章标签： Openssl

本文链接：https://blog.csdn.net/Qevery678/article/details/89492076

版权

Linux 应用系统同时被 2 个专栏收录

48 篇文章

订阅专栏

Linux 系统配置应用服务

28 篇文章

订阅专栏

本文详细介绍了如何使用OpenSSL工具生成数字证书的过程，包括使用CA密钥和证书、CSR文件来创建服务器证书，并解决了因commonName重复导致的数据库更新失败问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

[root@ca ~]# openssl ca -keyfile /etc/pki/CA/private/cakey.pem -cert /etc/pki/CA/cacert.pem -in /tmp/server.csr -out /server.crt
Using configuration from /etc/pki/tls/openssl.cnf
Enter pass phrase for /etc/pki/CA/private/cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 14709139257483550390 (0xcc215c38ea0f5eb6)
        Validity
            Not Before: Apr 24 05:37:55 2019 GMT
            Not After : Apr 23 05:37:55 2020 GMT
        Subject:
            countryName               = CN
            stateOrProvinceName       = beijing
            organizationName          = zh
            organizationalUnitName    = IT
            commonName                = ca
            emailAddress              = 1@163.com
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:TRUE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                9A:8E:97:F4:FF:74:A0:09:5F:B1:A7:26:0B:7C:DB:80:AC:3E:4E:CC
            X509v3 Authority Key Identifier: 
                keyid:3F:BF:48:24:36:AE:E6:0D:B4:D9:B9:64:8D:D9:3D:68:EB:AC:0D:47

Certificate is to be certified until Apr 23 05:37:55 2020 GMT (365 days)
Sign the certificate? [y/n]:y
failed to update database
TXT_DB error number 2

原因是commonName 跟前面生成ca文件和server 密钥commonname相同导致，可以换一个commonname就可以了.