Use CA to sign the certificate and CA to sign the certificate

Use CA to sign the certificate and CA to sign the certificate

This article original from the http://blog.csdn.net/voipmaker reprint indicate the source.

This series of articles is divided into three parts. It mainly introduces how to build your own certificate issuing service, generate certificate requests, and sign the generated certificate request through the self-built CA and finally apply it to the service.

This article is the last one. In combination with the previous two articles, you can sign your own applications through a self-built CA.

This document assumes that you have already referred to the two signature document procedures,
The CA key is in the/home/cg/myca/private/directory/
CA root certificate in/home/cg/myca/certs/
The CA configuration file is in/home/cg/myca/conf/
Serial in/home/cg/myca/
Index.txt in/home/cg/myca/


Copy csr. server1.pem to the/home/cg/myca/csr/directory.


Sign the csr:


Openssl x509-days 3650-CA certs/crt. ca. cg. pem-CAkey private/key. ca. cg. pem-req-in csr/csr. server1.pem-outform PEM-out certs/crt. server1.pem-CAserial serial


Final file certs/crt. server1.pem
Is the generated signature certificate