From: John Downey Date: 2011-11-10T06:26:24+09:00 Subject: Re: [gist] Ruby script for creating TLS certificates --001485f7972c6bcb3004b153f015 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable You actually send them what is called a certificate signing request (CSR). The OpenSSL::X509::Request class can be used to generate this for you. It is signed with your key and includes the public part of the key so that the CA can give you a certificate for it. On Wed, Nov 9, 2011 at 4:20 PM, I=F1aki Baz Castillo wrote: > Hi, I've coded a Ruby script that creates autosigned TLS certificates > (with advanced features such as SubjectAltName fields for "DNS" and > "URI:sip" values). It's inspired in a tool within Vines project [*] > and available here: > > https://gist.github.com/1352927 > > However, I would also like to modify the script in order to just > generate a NOT signed certificate, so I can give it to a CA (Verisign, > Thawe...) and ask it to sign it (by paying of course). I think that > this would be achived just by removing all the lines in the script > containing "key" word. Am I correct? or should I do something else? > > Thanks a lot. > > > > [*] https://github.com/negativecode/vines > > -- > I=F1aki Baz Castillo > > > --=20 John Downey --001485f7972c6bcb3004b153f015--