Copyleft and disclaimer of warranty
Links: OpenSSL.
Please note that because of some limitations in the OpenSSL
configuration files, all of them are generated by preprocessing
the corresponding .ini
files listed here, as specified
in the
Makefile
,
and the definitions common to all configuration files are contained
in the
default.ini
.
All files contain extensive comments, and in particular
default.ini
contains a suitable list of references.
Please read all these references carefully and several times.
Unfortunately CA operation and certificate generation, even for
a private, informal CA, involves difficult concepts and complicated
details, especially with OpenSSL, and it is not something to be
attempted without an in depth understanding of the general issues
and of the peculiarities related to OpenSSL.
You probably will need to customize all all the files
in this directory to adapt them to your case. As they are here,
they are set up for a private CA called Example
Ltd.
and for this to accept a request and grant a
certificate for the domain example.com
.
If you need a simpler approach to generate simple certificates,
the
GNU TLS
library comes with the
certtool
utility.
Name Last modified Size Description
Parent Directory -
Makefile 2004-08-06 14:11 2.2K
com.example.SSL_CertRequest.ini 2004-08-06 13:34 2.3K
com.example.SSL_Certificate.ini 2004-08-06 13:39 1.6K
com.example_CACertificate.ini 2004-08-06 13:34 2.6K
default.ini 2004-08-06 13:34 15K