RE: openssl verify failure: Re: create certificate chain

2013-08-19 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of sherry > Sent: Friday, 16 August, 2013 20:09 > Hi Dirk, > (This is an open list, so I'll answer.) Aside: I hope you know RSA 1024 is now considered under some threat (though not actually broken), and not safe for a projected 10-year lifeti

openssl verify failure: Re: create certificate chain

2013-08-18 Thread sherry
Hi Dirk, Thanks for your post. You seems to be so knowledgeable! I tried your commands, but I am not able to verify with "openssl verify". Could you please help? Following is the command sequence: root@dev12042:~/cert# openssl genrsa -out ca.key 1024 Generating RSA private key, 1024 bit long m

Re: create certificate chain

2013-03-12 Thread ashish2881
Hi Dirk , Thanks for the reply . These commands worked for me . I have created a single key and and used it for ca-cert ,intermediate-cert and server/client cert . otherwise ,we can use separate keys and commands are like this : openssl genrsa -des3 -out ca.key 1024 openssl req -new

Re: create certificate chain

2013-03-04 Thread Dirk-Willem van Gulik
On 4 mrt. 2013, at 08:47, ashish2881 wrote: > Hi , > I want to create a certificate chain ( self signed root ca > cert+intermediate cert + server-cert). > Please let me know openssl commands and the configuration required to create > root-ca ,intermediate cert signed by root-ca and server c