Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use following commands to create certificates and private keys:

./ -newca 
./ -newreq-nodes 
./ -signreq

And I set newcert.pem and newkey.pem as local certificate and private key to the server. demoCA/cacert.pem is public certificate for client applications. I'd like to know if this solution is good and safe. Or where I made a mistake if it's not ok

share|improve this question
Where did come from? – womble Jul 27 '11 at 22:41 is distributed with OpenSSL – david Jul 27 '11 at 22:46

As long as self-signed certificates are fine for your application and you can install this CA into the clients, then it should be fine. assumes some defaults, but doesn't compromise anything security-wise. So, unless your application requires specific identifiers on the certificates themselves or a specific type of encryption to be used, you'll be just fine to use

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.