Hi Jeremy,

Root CA cert has to be self-signed, not by other CA. You can use
the 'openssl req' to create such cert. Example:

  openssl req -x509 -new -out certfile -newkey rsa:2048

Rgds.
Martin

> Jeremy wrote:
> 
> I'm trying to sign newly created certificates with a
> certificate already signed my thawte. However I'm having
> problems.
> I've read the FAQ at
> http://www.modssl.org/docs/2.8/ssl_faq.html, however there
> doesn't seem to be any information there that can help me.
> I've tried using the steps for creating my own CA and using
> sign.sh (modified for my system varibles, etc), but the many
> (too many to list here) ways I've tried have all failed.
> 
> Can anyone help me out?
> Thanks.
> 
> Using:
> OpenSSL 0.9.6 24
> 
> On:
> Redhat 6.2
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to