On Wed, Mar 17, 1999, Richard Robinson wrote:
> I'm looking through the HISTORY file
HISTORY? Hmmm... there is no HISTORY file in mod_ssl...
> at the part where make
> certificate has been expanded to use four TYPEs -- dummy, test,
> custom, and official.
>
> make certificate TYPE=? CRT=/your/path/to/your.crt
> KEY=/your/path/to/your.key
>
> I'm confused (sorry, but I am). My questions are several:
>
> 1) CRT [and KEY], if used, -- can be used with any TYPE? (or only the
> TYPE=OFFICIAL?)
"TYPE=OFFICIAL"? Hmmm.. seems like you're reading something different. But
nevertheless, I know what you mean. You mean the "TYPE=existing" option. Yes,
CRT=xxx KEY=xxx are only used with TYPE=existing.
> 2) What do CRT and KEY do? I'm presuming that CRT [and KEY],
> if used, should point to the full path of the server certificate [and
> key]
Yes.
> -- but if I already have the server certificate -- why am I
> doing "make certificate" (unless when "official" make certificate is
> only for installing the certificate into Apache source for later make
> install?
The whole TYPE=existing is for easy upgrading an Apache+mod_ssl installation
and giving the cert/key files is just for convinience reasons. You can always
just say "make install" without a previous "make certificate", but then you've
to copy your real cert/keys over the server.crt/server.key files in the
installation tree manually.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
