OpenSSL Certificate Authority notes

Alexander Wintermans

I have yet to decide under which license this document can be redistributed.


Table of Contents

1. Introduction
2. Creating a Certificate Authority
3. Creating a server certificate
3.1. Creating a server certificate request
3.2. Signing a certificate request
4. Inspecting objects
4.1. Examining a key
4.2. Examining a certificate
4.3. Examining a certificate request

1. Introduction

This document is intended as an instruction for creating your own certificate authority for signing certificates for use with all sorts of SSL connections (e.g. HTTPS, LDAPS). It is intended for small-scale work. It does not consider CRLs. The certificate authority may be used to sign any kind of certificate.

This document was made using the following (debian) packages.

PackageVersion
openssl0.9.7c-5