I have created an ssl-based server that I need to now create a proxy certificate for. (the second part of the school project).
I have found these lines on the OpenSSL Project:
openssl req -new -config openssl.cnf -out proxy.req -keyout proxy.key openssl x509 -req -CAcreateserial -in proxy.req -days 7 -out proxy.crt -CA user.crt -CAkey user.key -extfile openssl.cnf -extensions proxy_cert_ext
... but I don't know what is the role of "user.crt" ? I do not have this file. I have tried to create it with a tutorial about a self-signed SSL Certificate, but I'm lost in the documentation :(
- What are the requirements for an ssl proxy ?
- A 'Certificate Authority' is really necessary for this project ?
(To keep it simple I don't wish at this time for my program to include many checks on the clients authentication. I would like the SSL client to be tolerant of my program and accept a connection (even without much security) so that I can quickly check that it works.)