Re: [Pound Mailing List] Follow-Up to help with Pound, Web browsers and Certificates

On 08/03/2017 07:23 PM, Warren Perdue wrote:
> Hi D,
> 
> 
> I want to first verify I am doing this right.
> 
> I create the CA key
> Then create the CA cert and sign it using the CA key to create the CA
> certificate.
> 

Correct. The CA certs are self-signed.

> Then I create the client key.
> Then create the client certificate signed by the client key.
> 

Wrong.

You wanna make a client certificate request
and have the CA sign it.

Hope this helps,

Andrea

--
To unsubscribe send an email with subject unsubscribe to [email protected]
Please contact [email protected] for questions.