Hi there, I'm quite new to SSL, and I'm trying to create SSL certificates for internal use only. So far, I installed the default Debian package and did the following:
GENERATION OF ROOT CERTIFICATE openssl req -new > ca.csr -keyout ca.pem openssl rsa -in ca.pem -out ca.key openssl x509 -in ca.csr -out ca.crt -req -signkey ca.key -days 3650 GENERATION OF CERTIFICATE SIGNING REQUEST openssl req -new > mysite.csr -keyout mysite.pem openssl rsa -in mysite.pem -out mysite.key SIGNING THE CERTIFICATE openssl x509 -in mysite.csr -out mysite.crt -req -CA ca.crt -CAkey ca.pem -CAcreateserial -days 365 It may not be the best way of doing it, but it works :) However, I would like to use the -enddate directive, which only seems to work when using "openssl ca". For that, I'd have to set-up my openssl.cnf. Is there any other possibility of manually setting the -enddate with the above commands? I just want to test the certificates out, and the above seems to work, so I don't like to change a lot... Thanks a lot! Florian ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
