Make your keys Read and Write only by the super-user root. This is important because no one needs to touch these files.
use the following commands:
[root@deep] /# chmod 600 /etc/ssl/certs/ca.crt [root@deep] /# chmod 600 /etc/ssl/certs/server.crt [root@deep] /# chmod 600 /etc/ssl/private/ca.key [root@deep] /# chmod 600 /etc/ssl/private/server.key
Some possible uses of OpenSSL software, for example OpenSSL can be used to:
Create your own Certificate Server.
Provide data confidentiality, integrity, authentication, and electronic signature in transmission for the users.
Secure electronic commerce transactions.