I have installed openssl and am hoping to use it to create a self signed CA and then client certificates to go along with it. I am using everything after a normal install.
So far all I have done is a ca -newca, fill in the info. Then I do ca -newreq and then ca -sign. It seems I get what I need... I get the CA file, and the certificate file. To check them, I loaded the CA as a trusted root on my local machine, and then opened the certificate to see if it corresponded properly to the CA in the certification path, but I get the following message when I view it: The certificate is not valid because one of the certification authorities in the certification path does not appear to be allowed to issue certificates or this certificate cannot be used as an end-entity certificate. The CA does show up in the certification path, but with the yellow exclamation mark on it. Can anyone tell me how to correct this? Many thanks. Nathan -- View this message in context: http://www.nabble.com/Creating-certificates-t1502430.html#a4073593 Sent from the OpenSSL - User forum at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
