You can use any certificate to sign another, but / / the process is worthless unless the signing certificate is trusted / / by the software / users that will deal with the newly signed certificate / / We need our CA cert and it' s private key $cacert = "file: / /path / to / ca.crt"; $privkey = array("file: / /path / to / ca.key", "your_ca_key_passphrase"); $userscert = openssl_csr_sign($csrdata, $cacert, $privkey, 365); / / Now display the generated certificate so that the user can / / copy and paste it into their local configuration (such as a file / / to hold the certificate for their SSL server) openssl_x509_export($usercert, $certout) and echo $certout; / / Show any errors that occurred here while (($e = openssl_error_string()) !== false) {echo $e. "\n";}
예 1. openssl_csr_sign() example - signing a CSR (how to implement your own CA)