> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Michael S. Zick > > You must be new to mailing lists also. > Start your own thread, they are cheap here, don't hijack another topic.
Mike, How do you call that a thread hijack? New subject, new thread id... I don't see how it was a thread hijack. Hector, I wish I had a good resource to send your way. My experience has been like this: Years ago when I didn't know anything about generating or installing certs, I just found some random webpages about how to generate self-signed certs and I copied them brainlessly, but gained some familiarity. Later I wanted to have trusted signed certs, so I paid for services such as godaddy and thawte, and brainlessly followed their instructions, but gained further experience. More recently, I'm a fan of startssl.com. Often when I do this sort of stuff, the instructions written by whoever are slightly too specific, or the starting point or resources available to you at the time are slightly different. The industry keeps evolving a little bit. Targets move. For example, in a cisco ASA, last year I generated a csr, and got it signed. This year I went to regenerate and renew, but I found the ASA is only capable of signing using md5sum, which is no longer acceptable by the certificate authority, so even though I'm doing precisely the same task as I did 1 year ago, I can't follow the same process anymore. Hopefully someone can refer you to a good introductory set of materials, but I think most likely, you'll find too often something isn't written precisely for what you need, or something else has changed. I suggest you basically just start experimenting and learning. Ask questions here when you get stuck. The more exposure you give yourself, the better you'll learn. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org