> Source: [sk176783](https://support.checkpoint.com/results/sk/sk176783)

# sk176783 - "Can't openssl.cnf for reading" error when creating a CSR with the "cpopenssl" tool

| Property | Value |
|----------|-------|
| Solution ID | sk176783 |
| Date Created | 2021-12-08 |
| Last Modified | 2022-11-23 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server |
| Versions | R81.20, R81.10 (EOS), R81.20, R81 (EOS), R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS), R81.20 |
| OS | Gaia |

## Symptoms

- * When the user creates a CSR with the *cpopenssl* tool, this error shows:  
  "*Can't open \[PATH\]/openssl.cnf for reading, No such file or directory*"
* Same command with additional flag "*-config* " works fine:  
  `cpopenssl req -noout -text -in example.csr -config $CPDIR/conf/openssl.cnf`  
  `
  Certificate Request:`  
  `
  Data:`  
  `
  Version: 1 (0x0)`  
  `
  Subject: C = US, ST = State, L = City, O = Test, OU = Department, CN = New`

## Cause

An environment variable is missing in the "`.CPprofile.sh`" file.

## Solution

1. Add "`OPENSSL_CONF`" to the "`.CPprofile.sh`" file using this command:  
   *[Expert@Host:0]# $CPDIR/bin/XInstall AddToCPprofile OPENSSL_CONF $CPDIR/conf/openssl.cnf 0 0*
2. Reboot the appliance.
This variable is deleted during minor or major upgrade of the operating system, so you can use the command until this variable is added in a Jumbo Hotfix.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content