on 25/4/00 12:15 PM, David aka SpanskA at [EMAIL PROTECTED] wrote:
> Hi,
> I was wondering if I could create my own E-Mail Certificate. I looked
> through OpenSSL docs but the only thing I could find about that topic was a
> little function to encrypt and decrypt text messages. I'd like to be able to
> use my E-Mail Certificate with Netscape Messenger like the ones that
> Verisign give out for 60 day trial.
>
> When browsing through OpenSSL docs I also found that the verify function can
> tell you the purpose the cert was made for. How can I create a cert with a
> certain purpose then?
>
>
download the ssl.ca-0.1.tar.gz, then look at the "new-user-cert.sh". it is
merely shell script showing how to create user certificate. I used it. It
works on Netscape and IE 5. also see "p12.sh" script.
The general process is:
1. Create the self-signed root CA.
2. Create the user cert (S/MIME) and sign by your root CA.
3. Package it into pkcs12 format.
4. download to your browser, and Import in!
To change any details, just try to modify the new-user-cert.sh. Refer to
openssl's documentation (source/doc/openssl.txt) file.
hope that help.
______________________________________________________________________
Yeak Nai Siew [NIC:NY628] << Mac OS Forever >> << Linux Forever>>
([EMAIL PROTECTED] | [EMAIL PROTECTED]) http://www.md.com.my/
e-certificate http://www.brainbench.com/transcript.jsp?pid=120196
ICQ#: 13391181 Chief Technology Officer
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
