Hello Oliver, On Friday 28 May 2004 08:43, Oliver Adolph wrote: > I have a simple problem. I have a root CA running OpenCA 0.9.1.8 and i want > a sub CA below this CA. But how do I sign the certreq from this sub CA on > my root CA ? Is there a mechanism to import a certreq from another system ?
1. Initialise the Sub CA as usual, BUT... 2. When creating the CA cert, follow the export CSR to be sing ed by another CA path rather than the self sign path. 3. Untar your exchange file and extract the CSR. Save it locally. 4. Use a browser and go to your Root CA, request a new cert, use the PKCS10 server cert option. 5. Process the request through the Root CA. 6. From the Root CA extract the new certificate. 7. Tar the new certificate up in your Sub CA exchange file (I can't remember what to call it, but it is in your ca.conf file). 8. Go back to the Sub CA initialisation process and "Import signed CA cert". 9 Rebuild the chain (make sure that you have the root CA cert in the cacerts directory, if you have not, then this could cause you problems later on). 10. Job done. Chris... ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
