openssl - own certification authority

[piti]

hi
i'm creating a vpn network and was told that i should create my own ssl certification authority
so i did - placed all the configs/files into /etc/myCA/
but even i set OPENSSL_CONFIG to /etc/myCA/openssl.cnf as stated in the docs i cannot access my certificate, only when i specify full paths
is this somehow solveable?
thanx

 

[thedaver]

Why are you using SSL to create a VPN? Visit OpenVPN which has rapid, flexible solutions for Win, Lin, and more.

http://openvpn.sourceforge.net

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[piti]

yeah i do use openvpn, but i need to create the certificates and keys with openssl or not?

 

[thedaver]

If you follow the OpenVPN online docs, there shouldn't be any question. I use the static key methods, so key generation doesn't require certificate authenticity.

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[piti]

oki - i'll try that way