On Fri, Oct 04, 2013 at 10:05:08PM -0400, Dave Thompson wrote:
> > 1) is this a reasonable thing to do?
>
> Yes.
Ok thanks. That's reassuring.
> You don't say why you chose to generate keys centrally. In case you didn't
> know, even with your own CA you *can* still use the conventional process
On 10/4/2013 at 9:52 PM Dave Thompson wrote:
|> From: owner-openssl-us...@openssl.org On Behalf Of Mike.
|> Sent: Friday, October 04, 2013 16:28
|
|> I have just started to learn OpenSSL, and I am having troubles
|> finding documentation that is helpful.
|>
|> www.openssl.org seems to have lots o
> From: owner-openssl-us...@openssl.org On Behalf Of Dave Mitchell
> Sent: Friday, October 04, 2013 17:59
> I'm writing an openssl-based app that uses client and sever certs,
> generated using a private root CA. Each client has its own cert and
> private key.
>
> For ease of deployment, I'm combi
> From: owner-openssl-us...@openssl.org On Behalf Of Mike.
> Sent: Friday, October 04, 2013 16:28
> I have just started to learn OpenSSL, and I am having troubles
> finding documentation that is helpful.
>
> www.openssl.org seems to have lots of reference documentation, but
> not too much in usag
> From: owner-openssl-us...@openssl.org On Behalf Of Walter H.
> Sent: Friday, October 04, 2013 15:30
> there exists a self signed root CA certificate (A)
> one intermediate CA certificate (B)
> and this intermedia certificate has signed a SSL certificate (C) of a
> web server;
> [and C and B have