hello,

i try to be my self CA

i read and test some howto

but it stell doesn't work

i know how creates a csr for a web site
i know how sign it by myself
i know how creat a CA

but i don't know how the CA is suposed to sign a scr
for now i've tryed to sign the csr in the same way i sign it with my own
server key

what does i need ??

i have this : it runs under win32 (apache and mod_ssl runs ok)

openssl directory :
¦   GEN_CA.BAT           script to creat CA "democa"
¦   GEN_CSR.BAT          script to generate CSR
¦   libeay32.dll
¦   openssl.cnf
¦   openssl.cnf2.cnf
¦   openssl.exe
¦   SELF.BAT             script to self-sign CSR
¦   SIGN.BAT             script suposed to sign CSR with "CA" certificat
(democa\private\cakey.pem)
¦   ssleay32.dll
¦
+---cert
¦   +---arcean           a test web site stuff
¦   ¦       arcean.csr
¦   ¦       arcean.key        unprotected key with wich i self sign
¦   ¦       CA_arcean.cert         CA_signed (suposed to be)
¦   ¦       privkey.pem
¦   ¦       self_arno.cert         self signed
¦   ¦
¦   +---arno             a test web site stuff
¦           arno.csr
¦           arno.key
¦           CA_arno.cert
¦           privkey.pem
¦           self_arno.cert
¦
+---democa
    ¦   cacert.pem
    ¦
    +---private
            cakey.pem         key (protected) with wich i think i could
sign CSR


someone could help me ??

thanks




*******************************************************************
L'intégrité de ce message n'étant pas assurée sur internet, Natexis
Banques Populaires ne peut être tenu responsable de son contenu.
Toute utilisation ou diffusion non autorisée est interdite. Si vous
n'êtes pas destinataire de ce message, merci de le détruire et
d'avertir l'expéditeur.

The integrity of this message cannot be guaranteed on the Internet.
Natexis Banques Populaires can not therefore be considered
responsible for the contents.
Any unauthorized use or dissemination is prohibited. If you are not
the intended recipient of this message, then please delete it and 
notify the sender.
*******************************************************************
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to