TXT DB error number 2

failed to update database

TXT_DB error number 2

1 문제상황

Console

Copy

root@centos7:~/test1# openssl req -new -subj '/C=KR/L=Seoul/O=Example Company/CN=test.example.com' -key server1.key | openssl ca -batch -policy policy_anything -days 3650 -keyfile ca.key -cert ca.cert -out server1.cert
Using configuration from /etc/pki/tls/openssl.cnf
root@centos7:~/test1# openssl req -new -subj '/C=KR/L=Seoul/O=Example Company/CN=test.example.com' -key server1.key | openssl ca -batch -policy policy_anything -days 3650 -keyfile ca.key -cert ca.cert -in /dev/stdin -out server1.cert
Using configuration from /etc/pki/tls/openssl.cnf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 4098 (0x1002)
        Validity
            Not Before: Nov 18 05:43:08 2019 GMT
            Not After : Nov 15 05:43:08 2029 GMT
        Subject:
            countryName               = KR
            localityName              = Seoul
            organizationName          = Example Company
            commonName                = test.example.com
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            Netscape Comment:
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier:
                26:07:E7:E2:95:D2:C2:9C:58:30:E7:C1:46:B4:5D:26:6C:FE:1B:F9
            X509v3 Authority Key Identifier:
                keyid:A9:6D:F4:C2:13:3C:66:2C:8D:7E:64:1D:AE:74:8F:8B:42:7E:D2:8D

Certificate is to be certified until Nov 15 05:43:08 2029 GMT (3650 days)
failed to update database
TXT_DB error number 2

2 조치방법

Bash

Copy

rm -f /etc/pki/CA/index.txt /etc/pki/CA/newcerts/*.pem
touch /etc/pki/CA/index.txt
echo 1000 > /etc/pki/CA/serial

3 같이 보기

• openssl CA/서버/클라이언트 인증서 생성