Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I use following commands to create certificates and private keys:

./CA.pl -newca 
./CA.pl -newreq-nodes 
./CA.pl -signreq

And I set newcert.pem and newkey.pem as local certificate and private key to the server. demoCA/cacert.pem is public certificate for client applications. I'd like to know if this solution is good and safe. Or where I made a mistake if it's not ok

share|improve this question
    
Where did CA.pl come from? –  womble Jul 27 '11 at 22:41
    
CA.pl is distributed with OpenSSL –  david Jul 27 '11 at 22:46

1 Answer 1

As long as self-signed certificates are fine for your application and you can install this CA into the clients, then it should be fine. CA.pl assumes some defaults, but doesn't compromise anything security-wise. So, unless your application requires specific identifiers on the certificates themselves or a specific type of encryption to be used, you'll be just fine to use CA.pl.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.