From: EJBCA S. <ejb...@pr...> - 2006-12-22 11:05:04
|
Hi again Can you give me a little more information about what you want to accomplish. EJBCA tries to follow the PKIX standard as much as possible, but what I guess you are after is that you want to issue certificates that resembles Verisign as much as possible. If you are after a tutorial how SSL works generally there are lots of them, just google. :) // Philip Sinister skrev: > My Client want to it the certificate signed by verisign.So I just wanted to > create that. > Dear Philip can you provide me the link for the good tutorials about SSL and > approaches to use SSL.I found EJBCA use different approach to use SSL than > conventional one. > > Thanks in advance.I also like to thank for your warm support. > > Sinister > > > > EJBCA Support wrote: > >> Hi again >> >> Can you give me any specific reason why you need this. The ca created >> during the installation process is primarily intended to be used >> temporarily to get your self going, not for production use. >> >> // Philip >> >> Sinister skrev: >> >>> Dear, >>> Thanks for your reply. >>> I think that documentation gives info about creating the External CA >>> signed >>> Sub CA.But i need to have the internal Root CA(CA created during the >>> installation process) signed by Verisign or Thawte. >>> >>> Thanks in advance. >>> >>> >>> >>> >>> >>> EJBCA Support wrote: >>> >>> >>>> It should be possible, as long a Thawte or verisign is able to process a >>>> PKCS10 and return a certificate (preferebly in PEM format) it should be >>>> ok. It they don't return a PEM certificate you can easily change the >>>> format with openssl. >>>> >>>> See docs.primekey.se/documentation/en/appendixes/externalcas.html >>>> For more info >>>> >>>> // Philip >>>> >>>> >>>> Sinister skrev: >>>> >>>> >>>>> Dear Sir, >>>>> Sorry for your inconvenience. >>>>> I just wanted to know that, can I create the root CA (the internal root >>>>> CA) >>>>> that is signed by Thawte or Verisign rather than self signed. >>>>> If it is possible, how? >>>>> Thank you. >>>>> >>>>> Warm Regards >>>>> Sinister >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> Ejbca-support wrote: >>>>> >>>>> >>>>> >>>>>> Hi, sorry but I don't understand the question. >>>>>> A CA in EJBCA is either: >>>>>> - Signed by an external CA, then the CA is by nature not a root CA >>>>>> - A root CA, this is an internal root CA >>>>>> - Signed by an internal CA, then the CA is by nature not a root CA >>>>>> >>>>>> An external CA can be either a root CA or a subCA to another root CA, >>>>>> this is not under the control of EJBCA. >>>>>> >>>>>> Can you clarify your question? >>>>>> >>>>>> Regards, >>>>>> Tomas >>>>>> >>>>>> >>>>>> >>>>>> Sinister skrev: >>>>>> >>>>>> >>>>>> >>>>>>> Dear Sir, >>>>>>> Can I create the External CA as my root CA? >>>>>>> If yes how can I do this. >>>>>>> Waiting for the guidelines. >>>>>>> Thank you >>>>>>> >>>>>>> >>>>>>> >>>>>> ------------------------------------------------------------------------- >>>>>> Take Surveys. Earn Cash. Influence the Future of IT >>>>>> Join SourceForge.net's Techsay panel and you'll get the chance to >>>>>> share >>>>>> your >>>>>> opinions on IT & business topics through brief surveys - and earn cash >>>>>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >>>>>> _______________________________________________ >>>>>> Ejbca-develop mailing list >>>>>> Ejb...@li... >>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>> ------------------------------------------------------------------------- >>>> Take Surveys. Earn Cash. Influence the Future of IT >>>> Join SourceForge.net's Techsay panel and you'll get the chance to share >>>> your >>>> opinions on IT & business topics through brief surveys - and earn cash >>>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >>>> _______________________________________________ >>>> Ejbca-develop mailing list >>>> Ejb...@li... >>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >>>> >>>> >>>> >>>> >>> >>> >> ------------------------------------------------------------------------- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to share >> your >> opinions on IT & business topics through brief surveys - and earn cash >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >> _______________________________________________ >> Ejbca-develop mailing list >> Ejb...@li... >> https://lists.sourceforge.net/lists/listinfo/ejbca-develop >> >> >> > > |