Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

Instead of self signing each website i make which is accessible online but is not meant for the public i would like to create an issuer which i'll import into my trusted issuer and sign multiple sites. This say if someone else signs my domain (lets say the server has been compromised) i'll be alerted since it doesnt match our issuer.

How do i do this? i only seen ways to self sign.

share|improve this question

1 Answer

up vote 1 down vote accepted

OpenSSL comes with a script called "CA.sh" that will automate pretty much everything you're looking to do. Google "CA.sh openssl" and run with it.

share|improve this answer
+1. I liked this octaldream.com/~scottm/talks/ssl/opensslca.html however 1) can i make it so i dont have to type a password everytime i restart apache 2) the p12 file is for the site. Do you know the cmd to export the actual CA so anything i sign with it is valid? – acidzombie24 Jul 15 '10 at 14:18
I figured the 2nd out. I'd like to know how i can restart apache without writing the password for my ssl files – acidzombie24 Jul 15 '10 at 15:03
nevermind i asked a question and got an answer. My SSL is complete. serverfault.com/questions/160768/… – acidzombie24 Jul 15 '10 at 15:26

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.