Creating SSL Certs

External Since: Aug 30, 2003 Posts: 4

Hi Folks,

i have troubles to create certs for my ssl server.

i did these steps like descriped
at http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html#keyscerts

$ openssl genrsa -des3 -out server.key 1024

$ openssl rsa -noout -text -in server.key

$ openssl rsa -in server.key -out server.key.unsecure

$ openssl req -new -key server.key -out server.csr

$ openssl req -noout -text -in server.csr

sign my certificate:

$ openssl genrsa -des3 -out ca.key 1024

$ openssl rsa -noout -text -in ca.key

$ openssl rsa -in ca.key -out ca.key.unsecure

$ openssl req -new -x509 -days 365 -key ca.key -out ca.crt

$ openssl x509 -noout -text -in ca.crt

script from mod_ssl

$ ./sign.sh server.csr <-- at this step is got an error

and my cert is not useable.

where is my fault?

thx. Johannes

External Since: Jun 28, 2003 Posts: 203

"Joe Güntner" <j.guentner.TakeThisOut@kabsi.at> wrote in message
news:3F4FEB80.4010100@kabsi.at...

> $ ./sign.sh server.csr <-- at this step is got an error
>
> and my cert is not useable.

Would have helped if you had given the error you are getting. Your process
seems a little long and complicated. Try this instead:

* openssl.exe req -config openssl.cnf -new -nodes -out server.csr -keyout
server.key
* openssl.exe x509 -in server.csr -out server.crt -req -signkey
server.key -days 365 -set_serial 1
(Increment the serial number each time you create a certificate.)

Then use directives like these:
SSLCertificateFile /path/to/server.crt
SSLCertificateKeyFile /path/to/server.key

Richard.