On Fri, Jun 02, 2006 at 11:14:18AM -0700, david kine wrote:
> Hello,
>
> I have a certificate authority A who signs an entity B, who then signs and
> entity C. I will use C as the server certificate in s_server.
>
> This is a chain of three certificates.
>
> How do I load all three into s_server?
Create a single .pem file, containing in order:
- First the server certificate.
- Then the issuign CA certificate.
- Then optionally the root certificate.
It is my impression that the root CA cert is optional, because if the
client trusts it, the client already has a copy of it. If anyone knows
otherwise please speak up. The Postfix documentation says it is optional,
and I don't want to misinform users.
> The "-cert" option seems to allow only one certificate.
Only one PEM file, that can contain multiple x509 certificates.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
