How to sign keys with intermediary CA?

Support forum for Easy-RSA certificate management suite.
shamil
OpenVPN User
Posts: 15
Joined: Fri Jun 26, 2015 1:29 am

How to sign keys with intermediary CA?

Postby shamil » Tue Apr 19, 2016 8:48 pm

I made my root CA a while ago, and then I made an intermediary CA.

I can then do one of two things which are easy and obvious.
1. ./pkitool --csr client1 (creating unsigned is not a problem)
2. ./pkitool --sign client1 (great for signing with the root CA; what i don't want to do)

What's not obvious.
I haven't found anyway in pkitool to specify which CA i want an unsigned key signed by.
Scouring google has also yielded nothing.
How to do?

shamil
OpenVPN User
Posts: 15
Joined: Fri Jun 26, 2015 1:29 am

Re: How to sign keys with intermediary CA?

Postby shamil » Wed Apr 20, 2016 12:32 am

SOLVED

I found the cook book. No one else likes to detail setting up an intermediary ca anywhere on the net...that is next to unbelievable.

User avatar
Traffic
OpenVPN Protagonist
Posts: 4081
Joined: Sat Aug 09, 2014 11:24 am

Re: How to sign keys with intermediary CA?

Postby Traffic » Wed Apr 20, 2016 7:03 am

shamil wrote:I found the cook book
I presume you mean JJK's excellent work ;)

Good place for a quick plug: https://openvpn.net/index.php/open-source/books.html

You are welcome to share your solution here .. 8-)


Return to “Easy-RSA”

Who is online

Users browsing this forum: No registered users and 1 guest