Owen, I created my own CA for signing certificate, not by a commercial CA like Verisign. Now I try to make certificate again by "openssl" command on Solaris and still have PRNG problem:
# openssl genrsa 0des3 -out ca.ket 1024 ...PRNG not seeded... I try to resolve it by looking at http://www.modssl.org/docs/2.8/sslfaq.html (Thanks Samir Hatri), but still not clear about the solution. How to set up SSLRandomSeed directives and create a $HOME/.rnd file? Thanks, Hong -----Original Message----- From: Owen Boyle [mailto:[EMAIL PROTECTED]] Sent: Friday, December 21, 2001 3:30 AM To: [EMAIL PROTECTED] Subject: Re: make certificate > > Hi, > > I have installed "make certificate TYPE=custom" during the build of > mod_ssl-2.8.5-1.3.22 with Apache successfully as the followings: > > # cd ../apache_1.3.22 > # ./config ... --enable-module=ssl > # make > # make certificate TYPE=custom > ... > > After I installed mod_ssl certificate, is there any quick methods to > change some information of Common Name, Email Address, and Certificate > Validity days of certificate again? > > Should I change the whole certificate again after making certificate > if only some items of certificate need to be changed? Think about it. If you could edit a certificate after it had been issued, you could change its identity. So you could get a cert from Verisign for your own site, set up a fake amazon.com site, then edit your certificate to pretend it was for amazon.com... Or you could extend your certificate's life after it had expired (Verisign would love that!). You cannot edit a certificate it has been signed, it is a one-way encryption. The only way is to make a new certificate. Rgds, Owen Boyle. ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
