Re: Why is localhost self-signed cert a CA cert?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 01/08/2013 05:07 PM, Gordon Messmer wrote:
> On 01/08/2013 11:49 AM, Robert Moskowitz wrote:
>> Why was this chosen?  Why is not -extensions v3_req used in the
>> certificate creation?
> Because it has to be able to sign itself?

No. A self-signed cert need not and actually SHOULD not be a CA cert 
according to PKIX standards.

CA is for signing other certs.


_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux