[cobalt-users] Signing your own certificates

[Matt Perry <matt@xxxxxxxxxxxxxxx>]

On Wed, 7 Mar 2001, Colin J. Raven wrote:

>
> >A certificate is only for one customer at a time. There are multiple
> >ones also but very expensive.
> >
> >But why buy another one if you just want to access your RaQ. If it is
> >just you or someone who is fine doing the 'accept-step' one time then
> >you don't need to spend money. You can easily generate one yourself ...
>
> Hmmmm...generate one yourself?
> How would that be accomplished? Sounds like useful info to me, I'm
> fascinated by the idea

You can become your own certification authority and sign certificates
yourself.  However, your root certificate won't be recognized except by
browsers that you add it to by hand.  I don't know all of the details to
doing this, but the OpenSSL docs should help clarify.  Take a look at
http://www.openssl.org/docs/apps/CA.pl.html which you can use to create
and sign the certificates.

 - .\\