From owner-freebsd-questions@FreeBSD.ORG Thu Jul 21 18:48:28 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6326016A45C for ; Thu, 21 Jul 2005 18:48:27 +0000 (GMT) (envelope-from kirk@strauser.com) Received: from kanga.honeypot.net (kanga.honeypot.net [208.162.254.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8CE8F43DCB for ; Thu, 21 Jul 2005 18:48:02 +0000 (GMT) (envelope-from kirk@strauser.com) Received: from localhost (localhost [127.0.0.1]) by kanga.honeypot.net (Postfix) with ESMTP id B89CA21C8E2 for ; Thu, 21 Jul 2005 13:48:01 -0500 (CDT) Received: from kanga.honeypot.net ([127.0.0.1]) by localhost (kanga.honeypot.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 60070-15 for ; Thu, 21 Jul 2005 13:47:56 -0500 (CDT) Received: from janus.daycos.com (janus.daycos.com [204.26.70.77]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by kanga.honeypot.net (Postfix) with ESMTP id CD84F21C8D1 for ; Thu, 21 Jul 2005 13:47:56 -0500 (CDT) From: Kirk Strauser To: freebsd-questions@freebsd.org Date: Thu, 21 Jul 2005 13:47:55 -0500 User-Agent: KMail/1.8.1 References: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1432229.ltGNcXB3Yk"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200507211347.55633.kirk@strauser.com> X-Virus-Scanned: amavisd-new at honeypot.net Subject: Re: frontend for openssl? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2005 18:48:29 -0000 --nextPart1432229.ltGNcXB3Yk Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 21 July 2005 04:19, Mipam wrote: > Does there exist a frontend for openssl that can create and sign > certificates bit one that also can create and sign pkcs7 certs? > Maybe something exists to help you create your own certificate authority? Got the system sources? If so, look at /usr/src/crypto/openssl/apps/CA.pl= =20 which sounds like exactly what you want: 1. ./CA.pl -newca # Makes a new CA 2. ./CA.pl -newreq # Generate a certificate signing request 3. ./CA.pl -sign # Sign the request created in step 2 I copied it to /usr/local/bin and edited the "$CATOP" variable to point=20 to /usr/local/etc/mypersonalCA, then edited /etc/ssl/openssl.cnf to refer=20 to the same directory. That way, I don't have to deal with it wanting to=20 use the relative directory "./demoCA" during its operations. =2D-=20 Kirk Strauser --nextPart1432229.ltGNcXB3Yk Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iD8DBQBC3+3b5sRg+Y0CpvERAktyAJ4kCW+ynZJ1+bQN1JO47BcXtIybaQCeI3Xy RsWN7IN2jWmv6cAgMpHF+Es= =9MUi -----END PGP SIGNATURE----- --nextPart1432229.ltGNcXB3Yk--