On 10/16/2013 01:00 PM, Daniel Kahn Gillmor wrote:
>  certtool --load-ca-privkey=root-ca.key \
>    --load-ca-certificate=root-ca.pem \
>    --load-pubkey=intermediate-ca.pubkey \
>    > intermediate-ca.pem
> 
> You will also be prompted to answer some questions here.
> 
> Now you can create the end entity's certificate, using the intermediate
> CA's key:
> 
>  certtool --load-ca-privkey=intermediate-ca.key \
>    --load-ca-certificate=intermediate-ca.pem \
>    --load-pubkey=end-entity.pubkey \
>    > end-entity.pem

Sigh.  The above two commands both are missing the relevant action
argument, which is --generate-certificate.  i'm not sure how i missed
that :)

        --dkg

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Gnutls-help mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-help

Reply via email to