Hi Manoj,
if you want to generate just one selfsigned
certificate, this would be the easiest:
# generate key and self signed cert with one command
openssl req -x509 -nodes -days 3650 \
-subj '/C=DE/ST=some-state/L=somewhere/CN=example.com' \
-newkey rsa:1024 -keyout key.pem -out cert.pem
# ver
Hi,
Can you post the complete command to generate the self signed certificate ,
the case where the verification worked for you?
Thanks
--
View this message in context:
http://openssl.6102.n7.nabble.com/Verifying-self-signed-certificate-tp18922p47362.html
Sent from the OpenSSL - User mailing l
On Tue, 30 Nov 2010 01:36:16 +0200 "Dr. Stephen Henson"
wrote:
>On Tue, Nov 30, 2010, iruvopen...@hushmail.com wrote:
>
>> On Mon, 29 Nov 2010 20:05:43 +0200 "Dr. Stephen Henson"
>> wrote:
>> Greetings!
>>
>> I'm doing nothing funky:
>> $ openssl genrsa -des3 -out ca.key 4096
>> $ openssl re
On Mon, Nov 29, 2010 at 3:36 PM, Dr. Stephen Henson wrote:
If there were any extensions in the server certificate that wouldn't happen
but the command you create the server certificate with doesn't include any and
ends up creating the deprecated V1 certificate format.
Should this behavior b
On Tue, Nov 30, 2010, iruvopen...@hushmail.com wrote:
> On Mon, 29 Nov 2010 20:05:43 +0200 "Dr. Stephen Henson"
> wrote:
> Greetings!
>
> I'm doing nothing funky:
> $ openssl genrsa -des3 -out ca.key 4096
> $ openssl req -new -x509 -days 365 -key ca.key -out ca.crt
> $ openssl genrsa -des3 -out
On Mon, 29 Nov 2010 20:05:43 +0200 "Dr. Stephen Henson"
wrote:
>On Mon, Nov 29, 2010, iruvopen...@hushmail.com wrote:
>
>> Greetings,
>>
>> I guess this question must have been asked quite a lot over
>here,
>> but I couldn't find any traces of it
>> so I guess I'll repeat it.
>>
>> I can't se
On Mon, Nov 29, 2010, iruvopen...@hushmail.com wrote:
> Greetings,
>
> I guess this question must have been asked quite a lot over here,
> but I couldn't find any traces of it
> so I guess I'll repeat it.
>
> I can't seem to be able to verify (using 'openssl verify') -
> without openssl spitti