From owner-freebsd-questions@FreeBSD.ORG  Wed Feb 23 06:44:21 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6F36E16A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 23 Feb 2005 06:44:21 +0000 (GMT)
Received: from inetis.com (cpe-212-18-40-64.adsl.amis.net [212.18.40.64])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 72A3E43D53
	for <freebsd-questions@freebsd.org>;
	Wed, 23 Feb 2005 06:44:20 +0000 (GMT)
	(envelope-from karel@inetis.com)
Received: from [192.168.0.14] ([192.168.0.14]) by inetis.com with MailEnable
	ESMTP; Wed, 23 Feb 2005 07:43:58 +0100
Message-ID: <421C262D.2000306@inetis.com>
Date: Wed, 23 Feb 2005 07:43:57 +0100
From: Karel Miklav <karel@inetis.com>
User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Jeffery Fernandez <forums@jefferyfernandez.id.au>
References: <4217E846.9090604@jefferyfernandez.id.au>
In-Reply-To: <4217E846.9090604@jefferyfernandez.id.au>
X-Enigmail-Version: 0.85.0.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: freebsd-questions@freebsd.org
Subject: Re: Creating CA with CA.pl
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Feb 2005 06:44:21 -0000

Jeffery Fernandez wrote:
> I am following a tutorial on creating a CA on my FreeBSD 5.3 development 
> box. The tutorial can be found at 
> http://www.freebsddiary.org/openssl-client-authentication.php
> 
> I had a problem on signing the certificate as explained in this forum 
> thread: http://www.freebsddiary.org/phorum/read.php?f=1&i=9702&t=9694

Don't know about CA.pl, but try doing it manually. You should first edit 
the openssl.conf, make a directory structure for your CA, setup files... 
(man ca) then do something like this:

openssl req -new -x509 -keyout ca.key -out ca.pem -days 3650

Look around; there are many tutorials, guides, a Linux HOWTO... on the 
net, it's not related to FreeBSD.

-- 

Regards,
Karel Miklav