Hi Prasanth,

See if this helps:
http://www.dylanbeattie.net/docs/openssl_iis_ssl_howto.html

On Thu, Sep 9, 2010 at 10:33 AM, Prasanth Thandra <prasa...@igcar.gov.in>wrote:

>  Hi,
>
> Please excuse for a long mail ... this my first mail to this group...i just
> want make explain my problem more clearly..
>
> i have installed Win32OpenSSL_Light-1_0_0a.exe in my machine .. and created
> a local CA  as explained in PART1
>
>
> #################################################################################################################
> PART1
> Creating a Self-Signed Certificate using OpenSSL for use with Microsoft
> Internet Information Services (IIS) 5  Dylan Beattie, January 2003
>
>    1. OpenSSL is installed in C:\OpenSSL.
>    2. Create a working directory - here, we'll use c:\ssl as our working
>    folder.
>    3. Download this copy of 
> openssl.conf<http://www.dylanbeattie.net/docs/openssl.conf>to your working 
> folder.
>    4.
>
>    C:\ssl>*md keys requests certs*
>
>    5.
>
>    Create the file database.txt , serial.txt -: in c:\ssl
>
>
> Set up a Certificate Authority (CA)
>
>    1. First, we create a 1024-bit private key to use when creating our
>    CA.:
>
>    C:\ssl>*openssl genrsa -des3 -out keys/ca.key 1024*
>    ....
>
>    c:\ssl\keys\ca.key, containing our certificate authority private key.
>    2. create a master certificate based on this key, to use when signing
>    other certificates:
>
>    C:\ssl>*openssl req -config openssl.conf -new -x509 -days 1001 -key 
> keys/ca.key -out certs/ca.cer*
>    ........
>
>    3. This will create our CA certificate and store it as
>    c:\ssl\certs\ca.cer
>
>
> ##################################################################################################
>
> i have configure gpg4win also on a different machine ... using GPGSM i have
> generated a certificate request
>
> #gpgsm --output certificate.csr --gen-key
> .
> .
> this has created *certificate.csr *now i want this certificate to be
> signed by the CA that i have congigured on my machine. i hope that it is
> possible
> ... if it is please tell me how to do that????
>
> Thanking you
>
>



-- 
Regards
Kartik Rustagi

Reply via email to