I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a very simple one comparing to the complicated articles on the web , steps are : The process for creating your own certificate authority is pretty straight forward:Create a private keySelf-signInstall root CA on your various workstations // ????Once you do that, every device that you manage via HTTPS just needs to have its own    certificate created with the following steps:Create CSR for deviceSign CSR with root CA key /// THIS STEPCreate the Root Key :openssl genrsa -out rootCA.key 2048self-sign this certificate.openssl req -x509 -new -nodes -key rootCA.key -days 1024 -out rootCA.pemCreate A Certificate (Done Once Per Device) : openssl genrsa -out device.key 2048openssl req -new -key device.key -out device.csropenssl x509 -req -in device.csr -CA root.pem -CAkey root.key -CAcreateserial -out device.crt -days 500The last command is giving me this error : Signature oksubject=/C=XX/L=Default City/O=Default Company Ltd/CN=192.168.1.108Error opening CA Certificate root.pem3078969068:error:02001002:system library:fopen:No such file or directory:bss_file.c:355:fopen('root.pem','r')3078969068:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:357:unable to load certificateThe root.pem exists in the same folder why is it not being seen ? Also, the first two commands gave me two files, root.key and root.pem:there's no crt file to give to browser .What's wrong?
Failed to sign CSR with the CA root key
authentication;certificates
Verify the name of your certificate. It's inconsistent (root.pem in a command, rootCA.pem in another).You can install the root.pem file on your client hosts as indicated in the article, it's your CA certificate. PEMis a format for certificate, others exist. .crt is a generic extension. You can rename your certificate from root.pemto root.crtif you want to. 