Owen,

I created my own CA for signing certificate, not by a commercial CA like
Verisign. Now I try to make certificate again by "openssl" command on
Solaris
and still have PRNG problem:

# openssl genrsa 0des3 -out ca.ket 1024
...PRNG not seeded...

I try to resolve it by looking at http://www.modssl.org/docs/2.8/sslfaq.html

(Thanks Samir Hatri), but still not clear about the solution. How to set up
SSLRandomSeed directives and create a $HOME/.rnd file?

Thanks,
Hong


-----Original Message-----
From: Owen Boyle [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 3:30 AM
To: [EMAIL PROTECTED]
Subject: Re: make certificate

> 
> Hi,
> 
> I have installed "make certificate TYPE=custom" during the build of
> mod_ssl-2.8.5-1.3.22 with Apache successfully as the followings:
> 
> # cd ../apache_1.3.22
> # ./config ... --enable-module=ssl
> # make
> # make certificate TYPE=custom
> ...
> 
> After I installed mod_ssl certificate, is there any quick methods to
> change some information of Common Name, Email Address, and Certificate
> Validity days of certificate again?
> 
> Should I change the whole certificate again after making certificate
> if only some items of certificate need to be changed?

Think about it. If you could edit a certificate after it had been
issued, you could change its identity. So you could get a cert from
Verisign for your own site, set up a fake amazon.com site, then edit
your certificate to pretend it was for amazon.com... Or you could extend
your certificate's life after it had expired (Verisign would love
that!).

You cannot edit a certificate it has been signed, it is a one-way
encryption. The only way is to make a new certificate.

Rgds,

Owen Boyle.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to