I need to create a certificate chain for test purposes and I've
successfully created a CA and various other certificates, but my
problem is that this command:
openssl x509 -req -out 1410/ca1.crt -in 1410/ca1.csr -CA antqa.crt -
CAkey antqa_ca.key -CAcreateserial -extfile chain_ca.conf -extensions
v3_ca
with this extensions file:
[ v3_ca ]
basicConstraints=CA:TRUE
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid, issuer
fails with:
error loading the config file 'chain_ca.conf'

With such a simple config file, which is identical to hundreds of
examples in howtos, how can this be failing?
I've looked at a huge number of howto examples and not one seems to
describe, in unambiguous detail, what one needs to do to create a
certificate chain. All I know is that a command like the one above is
necessary to start the process of signing each certificate.