Using Certificates

• Generating the CA

  • openssl req -x509 -days 730 -newkey rsa:2048 -keyout CA_key.pem \ -out CA_cert.pem

• Creating the Sign Request

  • openssl req -newkey rsa:2048 -keyout HOST_key.pem -out HOST_req.pem

• Signing

  • mkdir demoCA
  • touch demoCA/index.txt
  • echo "01" > demoCA/serial
  • openssl ca -cert CA_cert.pem -keyfile CA_key.pem -in HOST_req.pem \ -out HOST_cert.pem -outdir .

Notizen: