Re: [Openca-Users] CA setup

[Massimiliano Pala]

Joseph Lee wrote:

Hello,

[...]

I used the following openSSL command to create my
self-signed CA cert and key:

% openssl req -config ca-openssl.cnf -x509 -newkey
rsa:2048 -keyout cakey.pem -out cacert.pem -outform
PEM

It generated cacert.pem and cakey.pem successfully.

I don't have a database to use. I think openSSL uses a
flat file for that. Is this OK?

No,

after having installed OpenCA you should use the provided interface
to create all the keys/reqs/certs needed. Checkout the documentation
OpenCA Guide either in the downloaded package or on the website:

http://www.openca.org/openca/

--

Best Regards,

Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]      [EMAIL PROTECTED]
                                                Tel.:   +39 (0)11  564 7081
http://security.polito.it                       Fax:    +39   178  270 2077
                                                Mobile: +39 (0)347 7222 365

Politecnico di Torino (EuroPKI)
Certification Authority Informations:

Authority Access Point                                  http://ca.polito.it
Authority's Certificate:          http://ca.polito.it/ca_cert/en_index.html
Certificate Revocation List:              http://ca.polito.it/crl02/crl.crl
--o------------------------------------------------------------------------

smime.p7s
Description: S/MIME Cryptographic Signature