Don't forget to change (on root-ra) the Role in CSR to Sub-CA!
> 7.5 Run make in the chain directory. > > 8. Rebuild the Sub CA chain.
Step 7.5 is done by step 8 (I think - I didn't run make). I have also placed the root-ca cert into chain directory on ra... I don't know if it's really nessecary but it makes no problems ;-)
Regards, Gottfried
Chris Covell wrote:
Guys,
As you know I have been having problems with signing using certs generated by my sub CA. I am just about to rebuild the Sub CA to try and sort it out. Can I get any of you that have done this to confirm my stages please...
1. Start with a fully working root CA and RA.
2. Configure and Install a new Sub CA software.
3. Initialise the CA and
4. Generate new private key, make CSR, export CSR.
5. Import the CSR into the Root RA and get the Root CA to sign.
6. Import the signed certificate back into the sub CA.
7. (I missed this one out before) copy the root CA cert into the chain directory as cacert.crt.
7.5 Run make in the chain directory.
8. Rebuild the Sub CA chain.
9. Export the config.
Is there anythink I have missed ?
Should this work ?
Please can you tell me if this is the correct sequence of events ?
Chris...
------------------------------------------------------- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
