On Fri, 2021-07-16 at 16:50 +0300, Vitaly Chikunov wrote: > > - openssl pkey -in test-rsa1024.key -out test-rsa1024.pub -pubout > > - openssl req -verbose -new -nodes -utf8 -sha1 -days 10000 -batch -x509 > > -extensions skid -config test-ca.conf -newkey rsa:1024 -out test- > > rsa1024_skid.cer -outform DER -keyout test-rsa1024_skid.key > > Using configuration from test-ca.conf > > Error Loading extension section skid <=== > > How `test-ca.conf' looked like? Maybe it's not updated? > Try to run ./gen-keys.sh clean (which is called from make distclean). Thanks, that resolved it. Manually removing the keys wasn't enough. Mimi