UNIX for Dummies Questions & Answers

Hi,

I am currently in the process of implementing port based authentication(802.1x) in my home network through radius(FreeRadius).

I want all my clients to use a certificate for authenticating (eap-tls)

However openssl's massive amount of configuration options has me a bit confused.
And the whole certificate part is not one of my stronger points.

I need a certificate used on the server itself and a couple of certificates to export to clients.

So i started by making the keys(and removing the password):

Code:

openssl genrsa -aes128 -out serverkey.key 1024

#Next create a certificate request

Code:

 openssl req -new -key serverkey.key -out server.csr

This is the part that has me a little bewildered, do i use

Code:

 openssl ca <options>

or

Code:

 openssl x509 <options>

when signing the certificates, and what is the difference ?