<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div class="">On 31 Jan 2020, at 01:25, Douglas Morris <<a href="mailto:dougbmorris@yahoo.com" class="">dougbmorris@yahoo.com</a>> wrote:</div><div class=""><br class=""><blockquote type="cite" class=""><span style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 13px;" class="">Interesting. I think I misunderstood this explanation about the -signkey <file> option: "</span><span class="" style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 13px;">This option causes the input file to be self signed using the supplied private key.</span><span style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 13px;" class="">"</span><br class=""><div class=""><div class=""><div class="ydpa7863b90yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div class=""><div dir="ltr" data-setdir="false" class=""><br class=""></div><div dir="ltr" data-setdir="false" class="">Your input has me thinking that a certificate signing request is in fact self-signed like a self-signed certificate is self-signed. I think I mistakenly supposed any self-signing meant acting like a "mini CA". I shall give those two x509 options, '<span class="">-x509toreq' and '<span class="">-signkey</span>',</span> a try.<br class=""></div></div></div></div></div></blockquote></div><br class=""><div class="">Correct - a CSR is generally signed by the party submitting it - thus proving that he or she has access to their own private key.</div><div class=""><br class=""></div><div class="">Dw.</div></div></body></html>