On Wed, Nov 09, 2005, Warrick FitzGerald wrote:

> 
> Here's the exact process I'm following (see details below):
> 
> 1. Create CA
> 2. Create Cert
> 3. Try to verify
> 
> For some odd reason CA.pl writes the Key and Cert to newreq.pem, so no
> the above was not a type ... am I misunderstanding something here?
> 

What you should do is..

1. Create CA
2. Create cert req.
3. Sign req with CA.
4. Try to verify.

The commands:

CA.pl -newca
CA.pl -newreq
CA.pl -signreq

should do it.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to