Dear SSL users,
I apologize if this is an often asked question. I have been looking
through the documentation, and experimenting, but I have not been able to
do what I want to do.
I have a private key that I created with
/usr/local/ssl/bin/req -new -x509
This key is now called privkey.pem
I know want to create a new key/certificate pair
/usr/local/ssl/bin/req -new -x509 -keyout keyb.pem > cert.pem
I now have keyb.pem (the private key for keyb), and cert.pem (the public
key for b (am I correct?)).
What I now want to do is sign cert.pem with privkey.pem, so that people
seeing cert.pem could be sure that it was trusted by privkey.pem.
How can I do this?
I tried
/usr/local/ssl/bin/x509 -signkey privkey.pem <cert.pem > cert2.pem
However, when I try to look at cert2 with
/usr/local/ssl/bin/asn1parse < cert2.pem
I see no mention of privkey... If anyone could tell me what I am doing
wrong, I would be most appreciative. It certainly is asking me for the
passphrase of privkey, so maybe it is signing correctly and I just don't
know how to see it?
Thank you very much for your time,
Julien Beasley
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
