Markus Wagner wrote:
>
> Hi,
>
> when signing new certificates with openssl ca one can use the -config
> option to specify which CA and options to use.
>
> But when creating a self signed root certificate there is no such
> option.
There is an equivalent option. The normal way to create a self signed
root certificate is with:
openssl req -x509
this automatically uses the openssl.cnf config file and the relevant
extensions. Read the manual for more info.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
