In the last few days I was trying to understand the story of certificates, and I understood the main principle of them, but I didn't understand that step when we create a CA cert to sign my own server cert.
I will summarize here what I have understood about creating new certificates to use them with the services on my server and please tell me if everything is right and help me to understand the points which I miss or don't understand:
I create my own private key randomly (server.key)
I generate my public key according to the previous public key (server.csr), and this file is just a normal certificate but without any signing.
I repeat the last two steps to get ca.key and ca.csr. and let them to sign themselves somehow to get ca.crt (I don't understand the self-signing process here).
use them to sign my server.csr to get server.crt.
Now what I don't understand, if I were able to self sign the files in the step 3, why didn't I easily just do the first two steps and let them to sign themselves to get that server.crt file?
I believe that I misunderstand something about that self signing process, but unfortunately I saw a lot of videos and read a lot of articles but nothing helped to repair that.