howto: openssl and sslserver

Greetings,

I have written a small howto on creating certificates for servers and
clients and then using them with Superscript's sslserver. I'd be glad
if someone could have a look at it and give corrections or suggestions
where necessary. In particular, I am still not completely sure about
the meaning of the self-signing (I think that's what it is) done by my
script mkclientcert. Also, for example in the call

mkclientcert user01 ca-user01

the password for ca-user01 is not required anymore. I am unsure why
this is the case.

However, I tested everything written in this howto, and it works
perfectly (or me) just as intended. You can find it at

http://plastictree.net/howto/sslserver/


Thanks for your comments!
Lasse

--
Those who do not understand Unix
are condemned to reinvent it, poorly.
-- Henry Spencer, 1987.