Certificates eat my brain

[mottsc]

Why are digital certificates so difficult?

What I want:

1. A root certificate from which to create a signing certificate
2. A signing certificate
3. A certificate to put on a device to validate code signed with the signing certificate
4. To be able to do all this with openssl or the Java keytool

With the Java keytool I can make a self signed certificate and

Comments

[bruellaffe]

It's times like this I'm glad I'm a hardware guy.

[mottsc]

It's times like this that I wish I had stuck with hardware.

[bruellaffe]

Yeah, but I'd like to see code shock the living shit out of someone sometime....