In the preceding section, we simulated a CA with a keystore and the
CertificateSigner tool. However, most CAs run more sophisticated software to manage certificates, and they use slightly different formats for certificates. This section shows the added steps required to interact with those software packages.
We will use the OpenSSL software package as an example. The software is pre-installed on many Linux systems and Mac OS X, and a Cygwin port is also available. Alternatively, you can download the software at www.openssl.org.
To create a CA, run the
CA script. The exact location depends on your operating system. On Ubuntu, run
This script creates a subdirectory called
demoCA in the ...