Signing your own certificates: being your own CA

From: Garrett Smith (gsmith_junk_at_yahoo.com)
Date: 01/13/04 

Date: Mon, 12 Jan 2004 15:13:10 -0800

Within my organization I would like to act as my own CA.
I can do this because our servers only talk to each other
and I can securely distribute public keays. Therefore,
there is no need to introduce third party trust.

I'd like to:
1. Generate a private key for signing certificates.
2. Securely distribute the public key to servers and
install it as a trusted root certificate.
3. Sign X.509 certificates generated for securing SOAP
requests.

I know how to do everything except step 3; how do you
sign a public key using your own private key to create a
certificate?

Best,
Garrett

Relevant Pages

  • Re: I have installed my digital certificate,but where is my public key?
    ... You don't need to worry about your public key. ... I posted to you once how to secure your privacy, ... Personally I have certificates for such purposes (on-line ... have a backup of your private key in secure place (e.g. exported and ...
    (microsoft.public.security)
  • Re: Certificates
    ... > Certificates in Windows 2000/2003 are part of the Public Key ... > The domain recovery agent for EFS is an example of a private key used to ... With smart card access required, ...
    (microsoft.public.cert.exam.mcse)
  • Re: Question about cryptography and public/private keys
    ... source if your private key couldn't unlock the ciphered data because ... Yep, you got encryption down. ... Encrypting with the public key though ... you can generate your own certificates and ...
    (alt.computer.security)
  • Re: Certificates
    ... Certificates in Windows 2000/2003 are part of the Public Key Infrastructure used ... as more secure or additional authentication for users AND computers. ... The domain recovery agent for EFS is an example of a private key used to recover ...
    (microsoft.public.cert.exam.mcse)
  • Re: Auto login with ssh
    ... > I am now working with two servers which has to be synchronized with ... > synchronization over SSH. ... Now you should be able to log on via public key ... And don't specify a passphrase for your private key;) ...
    (comp.os.linux.networking)