Own CA

[Robin Aly]

Hello,   my problem is in understanding the technique used to build up a own CA, as discribed in your faq (ssl_faq.html#ToC29). i somehow get along with the signing stuff, but can't imagine how the CA would run. I mean I don't start any service. where does the client get his ok, that this public key is the right one for this site ?   i'm a systemadministrator for a school in switzerland. we are building a website mainly for the students and the teachers at this school. in order to have authentification data encrypted we want to use apache (mod_ssl) under linux (suse 6.2). we don't have enough money to buy a certificate from one of the sellers, so we wanted to build our own instance (CA), in order to prevent the error message coming up if a user visits a https page.   could somebody help us ?   thank you!   regards robin aly   --- Robin Aly email : [EMAIL PROTECTED]