It was a great tutorial and thanks for this.
I need to install client certificate and generated one. I would like to know if I need to generate both server and client certificate to install the client certificates.
I already generated a server certificate but when I generate a client certificate using the below command
openssl ca -config intermediate/openssl.cnf -extensions server_cert -days 375 -notext -md sha256 -in intermediate/csr/www.example.com.csr.pem -out intermediate/certs/www.example.com.server.cert.pem
I get the following error.
failed to update database
TXT_DB error number 2
If I need to generate client certificate alone what would be my apache2 config. Should I enable SSLEngine on
or just I give this 3 items.