[Fedora-directory-users] cert signing

[Jeff Falgout]

Brian K. Jones said:
> Hi,
>
> Anyone have a procedure for self signing a certificate request from FDS
> using
> an existing CA cert with openssl? Also - anyone know why I can't just use
> an
> existing cert/key pair with FDS that was created and self-signed already -
> or
> if I can, how?
>
> brian.


openssl x509 -req -in /path/to/csr \
        -CA /path/to/cacert \
        -CAkey /path/to/cakey -CAcreateserial \
        -out /path/to/signed.crt

I just use this command to sign the csr generated from the console. I
haven't figured out how to use an existing cert/key - I'd very much like
to see how to do that.

Jeff