setup a CA to self-sign the SSL cert.

1. download a Openssl For windows binaries and source package
http://sourceforge.net/project/showfiles.php?group_id=23617&release_id=188569

2. unzip both of the OpenSSL packages to temporary folders. From the binaries package "bin" folder, copy the files "openssl.exe" and the two DLLs into the source package's "apps" folder.

In the "apps" folder is a file called CA.pl. Open this perl script in a text editor and change the line

$SSLEAY_CONFIG=$ENV{"SSLEAY_CONFIG"};
to
$SSLEAY_CONFIG="-config openssl.cnf";

3. Copy the cert request file to into this "apps" directory, and rename it to "newreq.pem".

Next, open a command prompt window in the apps directory, and run the following commands:

* perl CA.pl -newca
* perl CA.pl -signreq



$ perl CA.pl -newca

sg22785@maximus-a7juw9u ~/openssl-0.9.7c-src/src/openssl-0.9.7c/apps
$ perl CA.pl -signreq
Using configuration from openssl.cnf
Check that the request matches the signature
Signature ok
Certificate Details:
Serial Number: 1 (0x1)
Validity
Not Before: Jul 5 20:24:25 2007 GMT
Not After : Jul 4 20:24:25 2008 GMT
Subject:
countryName = US
stateOrProvinceName = California
localityName = Los Angeles
organizationName = MAXIMUS
organizationalUnitName = Education
commonName = lasttmp1.schoolmax.net
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
OpenSSL Generated Certificate
X509v3 Subject Key Identifier:
D2:AD:D2:27:2A:52:BD:67:1A:BF:4A:65:8E:E8:52:6E:D6:E7:B9:30
X509v3 Authority Key Identifier:
DirName:/C=AU/ST=QLD/CN=SSLeay/rsa test CA
serial:04

Certificate is to be certified until Jul 4 20:24:25 2008 GMT (365 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
Signed certificate is in newcert.pem