RE: Help! I wish for a CA HOWTO ...

2000-06-14 Thread Barnes, Michael L.
the following url is helpful: http://slwww.epfl.ch/SIC/SL/CA/ I however have done all of my own ca stuff by looking at the sign.sh file and by writing a certificate server to sign ppls certs. Hope this helps. Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: Help! I wish for a CA HOWTO ...

2000-06-14 Thread Rodrigo Coronado Vigueras
This document helped me so much. It's from Frederick Hirsh.. http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html It's about SSLeay but it also applies to Openssl very well. BTW, if Frederick is around here, THANK YOU. [EMAIL PROTECTED] wrote: Okay, I'm feeling like a moron,

Re: Help! I wish for a CA HOWTO ...

2000-06-14 Thread Dr Stephen Henson
[EMAIL PROTECTED] wrote: Okay, I'm feeling like a moron, now. I have built quite a few ssl servers for people (Thanks, Ralf, et alia!), but never bothered to look into the CA side of things ... before now. I am completely lost! I have scoured the FAQ at [modssl|openssl].org, but am

Re: Help! I wish for a CA HOWTO ...

2000-06-14 Thread geoffrey
Thanks to all who sent me url's and advice. I found out that the trouble was I did not have /usr/local/ssl/bin/ in my $PATH, and the CA.sh script was failing quietly, but would tell me that it had written my file anyway. Once I fixed the $PATH problem, it worked as expected. One more question, if