Re: [Ejbca-develop] External CA as root CA

[Sinister <bi...@cc...>]

My Client want to it the certificate signed by verisign.So I just wanted to
create that.
Dear Philip can you provide me the link for the good tutorials about SSL and
approaches to use SSL.I found EJBCA use different approach to use SSL than
conventional one.

Thanks in advance.I also like to thank for your warm support.

Sinister



EJBCA Support wrote:
> 
> Hi again
> 
> Can you give me any specific reason why you need this. The ca created 
> during the installation process is primarily intended to be used 
> temporarily to get your self going, not for production use.
> 
> // Philip
> 
> Sinister skrev:
>> Dear,
>> Thanks for your reply.
>> I think that documentation gives info about creating the External CA
>> signed
>> Sub CA.But i need to have the internal Root CA(CA created during the
>> installation process) signed by Verisign or Thawte.
>>
>> Thanks in advance.
>>
>>
>>
>>
>>
>> EJBCA Support wrote:
>>   
>>> It should be possible, as long a Thawte or verisign is able to process a 
>>> PKCS10 and return a certificate (preferebly in PEM format) it should be 
>>> ok. It they don't return a PEM certificate you can easily change the 
>>> format with openssl.
>>>
>>> See docs.primekey.se/documentation/en/appendixes/externalcas.html
>>> For more info
>>>
>>> // Philip
>>>
>>>
>>> Sinister skrev:
>>>     
>>>> Dear Sir,
>>>>    Sorry for your inconvenience.
>>>> I just wanted to know that, can I create the root CA (the internal root
>>>> CA)
>>>> that is signed by Thawte or Verisign rather than self signed.
>>>> If it is possible, how?
>>>> Thank you.
>>>>
>>>> Warm Regards
>>>> Sinister
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Ejbca-support wrote:
>>>>   
>>>>       
>>>>> Hi, sorry but I don't understand the question.
>>>>> A CA in EJBCA is either:
>>>>> - Signed by an external CA, then the CA is by nature not a root CA
>>>>> - A root CA, this is an internal root CA
>>>>> - Signed by an internal CA, then the CA is by nature not a root CA
>>>>>
>>>>> An external CA can be either a root CA or a subCA to another root CA, 
>>>>> this is not under the control of EJBCA.
>>>>>
>>>>> Can you clarify your question?
>>>>>
>>>>> Regards,
>>>>> Tomas
>>>>>
>>>>>
>>>>>
>>>>> Sinister skrev:
>>>>>     
>>>>>         
>>>>>> Dear Sir,
>>>>>> Can I create the External CA as my root CA?
>>>>>> If yes how can I do this.
>>>>>> Waiting for the guidelines.
>>>>>> Thank  you
>>>>>>       
>>>>>>           
>>>>> -------------------------------------------------------------------------
>>>>> Take Surveys. Earn Cash. Influence the Future of IT
>>>>> Join SourceForge.net's Techsay panel and you'll get the chance to
>>>>> share
>>>>> your
>>>>> opinions on IT & business topics through brief surveys - and earn cash
>>>>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>>>>> _______________________________________________
>>>>> Ejbca-develop mailing list
>>>>> Ejb...@li...
>>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>>>
>>>>>
>>>>>     
>>>>>         
>>>>   
>>>>       
>>> -------------------------------------------------------------------------
>>> Take Surveys. Earn Cash. Influence the Future of IT
>>> Join SourceForge.net's Techsay panel and you'll get the chance to share
>>> your
>>> opinions on IT & business topics through brief surveys - and earn cash
>>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>>> _______________________________________________
>>> Ejbca-develop mailing list
>>> Ejb...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>>
>>>     
>>
>>   
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 

-- 
View this message in context: http://www.nabble.com/External-CA-as-root-CA-tf2845435.html#a8019041
Sent from the EjbCA - Dev mailing list archive at Nabble.com.