> chgu wrote: > > Hi, > > I have created a root CA using openssl. And it can sign server/user > certificate(s) normally. Now i want to sign a subordinate root CA > certificate. But i don't know how to do it and what configuration > files > need. Can you help me? > A subordinate CA isn't a root CA. I assume you mean you want to create a subordinate CA signed by the root CA. OpenSSL 0.9.6 has a -signca option in the CA.pl script that can do this. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
