Re: ssl(8) cert generation instructions

2013-03-07 Thread Joerg Jung
Am 06.03.2013 um 19:23 schrieb Stefan Sperling s...@openbsd.org: On Wed, Mar 06, 2013 at 01:05:16PM +, Stuart Henderson wrote: It's not entirely obvious that -x509 actually means produce a csr, self-sign it (defaulting to SHA1), throw away the csr and write the cert and this had me stuck

ssl(8) cert generation instructions

2013-03-06 Thread Stuart Henderson
It's not entirely obvious that -x509 actually means produce a csr, self-sign it (defaulting to SHA1), throw away the csr and write the cert and this had me stuck for a long time when I wanted to play with DSA server certs. So here's a diff which moves DSA cert generation instructions to the same

Re: ssl(8) cert generation instructions

2013-03-06 Thread Stuart Henderson
On 2013/03/06 13:05, Stuart Henderson wrote: It's not entirely obvious that -x509 actually means produce a csr, self-sign it (defaulting to SHA1), throw away the csr and write the cert and this had me stuck for a long time when I wanted to play with DSA server certs. So here's a diff which

Re: ssl(8) cert generation instructions

2013-03-06 Thread Stefan Sperling
On Wed, Mar 06, 2013 at 01:05:16PM +, Stuart Henderson wrote: It's not entirely obvious that -x509 actually means produce a csr, self-sign it (defaulting to SHA1), throw away the csr and write the cert and this had me stuck for a long time when I wanted to play with DSA server certs. So