[MacEdge]

khiltd wrote:

Certificate Assistant is incredibly buggy, and even when you do everything right it will frequently fail to generate anything useful and leave a bunch of hung orphan processes laying around you either have to find and clean up or restart the entire machine before it will let you try again. It’s much easier to simply use openssl directly:

openssl genrsa -des3 -out ca.key 2048

openssl req -new -x509 -days 365 -key ca.key -out ca.crt

Thak you for your reply.

Do you have or know of any step by step instructions on using openssl to accomplish what I need? As I posted above “Particularly in securing Leopard VPN using certificates for L2TP authentication rather than using a shared secret?”

[Author]

Posts