mod_ssl question: using my own CA?

[Mikko Työläjärvi]

On Sat, 12 Jul 2003, admin wrote:

> OS: FreeBSD 4.8
> apache 1.3.27
> modssl 2.8.14
>
> goals:
>
> generate a server.crt file for apache
> generate a server.key file for apache
> I will be my own CA
>
> Hi,
>
> okay I am trying to find a way to overcome this most elusive and vague
> documentationt that I am finding on the modssl.org website.  I am completely
> confused by the documentation at this point.
>
> from:
> http://www.modssl.org/docs/2.7/ssl_faq.html#ToC29

 "So a script named sign.sh is distributed with the mod_ssl distribution"
                                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> --- snip ----
> 4. Now you can use this CA to sign server CSR's in order to create real SSL
> Certificates for use inside an Apache webserver (assuming you already have a
> server.csr at hand):
>
> $ ./sign.sh server.csr
>
> This signs the server CSR and results in a server.crt file.
>
> shell# find / -name sign.sh

 % tar ztf mod_ssl-2.8.14-1.3.27.tar.gz | grep sign.sh
 mod_ssl-2.8.14-1.3.27/pkg.contrib/sign.sh

  $.02,
  /Mikko