FreeRadius: Zertifikat erstellen failed. - pfSense

[2.3-RELEASE][admin@host]/usr/local/etc/raddb/certs: make all
/usr/bin/openssl gendh -out dh -2 2048
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
........................................................................................................................................+.................................................................+...........................................+...............................................................+...+........................................................................................................+...................................................................+................................+........................+....................................................................................................................................................................................................+..................................................................................................................................................+.......................+................................................................................+.....................................................................................+......................................................+.....................................+...................................................................+..............+....................................................................................+........................................................................+...................................+................................+............+..........................................................................................................................................................................................................................................................................................+.................+...............................+.............................+.............+.....................................................................+..................+.....................................................+.............+............................................................................................................................................................................................+.........+..+.................+...................................................................................................................................................................................................................................................................+.............+.........................+.........................................................................................................................................................................+......................................................................................................+............+.......+.+..................................................................................................+..........+...........................................+...................................................................................+..................................................................................................................................+.............................................................................+........+............................................................................................................................................................................................................................................+...................................+....................+.................................................+............................+...........................+..................................................+........................+........................................................................................+......................................+............+......................................................................+......................................................+.............................................................................................................+.......................................................+...............................................................++*++*
/usr/bin/openssl req -new  -out server.csr -keyout server.key -config ./server.cnf
Generating a 2048 bit RSA private key
..............+++
......................+++
writing new private key to 'server.key'  
-----
/usr/bin/openssl req -new -x509 -keyout ca.key -out ca.pem  -days  -config ./ca.cnf
unknown option ./ca.cnf
req [options] <infile >outfile
where options  are
 -inform arg    input format - DER or PEM
 -outform arg   output format - DER or PEM
 -in arg        input file
 -out arg       output file
 -text          text form of request
 -pubkey        output public key
 -noout         do not output REQ
 -verify        verify signature on REQ
 -modulus       RSA modulus
 -nodes         don't encrypt the output key  
 -engine e      use engine e, possibly a hardware device
 -subject       output the request's subject  
 -passin        private key password source
 -key file      use the private key contained in file
 -keyform arg   key file format
 -keyout arg    file to send the key to
 -rand file:file:...
                load the file (or the files in the directory) into
                the random number generator
 -newkey rsa:bits generate a new RSA key of 'bits' in size  
 -newkey dsa:file generate a new DSA key, parameters taken from CA in 'file'  
 -newkey ec:file generate a new EC key, parameters taken from CA in 'file'  
 -[digest]      Digest to sign with (md5, sha1, md2, mdc2, md4)
 -config file   request template file.
 -subj arg      set or modify request subject
 -multivalue-rdn enable support for multivalued RDNs
 -new           new request.
 -batch         do not ask anything during request generation
 -x509          output a x509 structure instead of a cert. req.
 -days          number of days a certificate generated by -x509 is valid for.
 -set_serial    serial number to use for a certificate generated by -x509.
 -newhdr        output "NEW" in the header lines  
 -asn1-kludge   Output the 'request' in a format that is wrong but some CA's  
                have been reported as requiring
 -extensions .. specify certificate extension section (override value in config file)
 -reqexts ..    specify request extension section (override value in config file)
 -utf8          input characters are UTF8 (default ASCII)
 -nameopt arg    - various certificate name options
 -reqopt arg    - various request text options
 
*** Error code 1
 
Stop.
make: stopped in /usr/local/etc/raddb/certs