#pragma section-numbers off

This page explains how to sign user SSL certificates, among other things.

[[TableOfContents]]

== Introduction ==

The page [http://www.rajeevnet.com/crypto/ca/ca-paper.html] was very helpful in figuring out which commands to run.  I took the initial copy of the OpenSSL configuration file from [http://sial.org/howto/openssl/ca/openssl.cnf], and then added things to it from the first link.

All of our CA stuff is stored at {{{/var/local/lib/ca}}} on deleuze.

The public-accessible CA stuff is at {{{/afs/hcoop.net/user/h/hc/hcoop/public_html/ca}}}, or [http://deleuze.hcoop.net/ca].