Difference between revisions of "Ca-certificates"

From Wiki at Neela Nurseries
Jump to: navigation, search
m (add link to aboutssl.org)
m
Line 22: Line 22:
 
-subj '/CN=localhost' -extensions EXT -config <( \
 
-subj '/CN=localhost' -extensions EXT -config <( \
 
printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")
 
printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")
 +
</pre>
 +
 +
And from LetsEncrypt tutorial:
 +
 +
<pre>
 +
openssl req -x509 -out localhost.crt -keyout localhost.key \
 +
  -newkey rsa:2048 -nodes -sha256 \
 +
  -subj '/CN=localhost' -extensions EXT -config <( \
 +
  printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")
 
</pre>
 
</pre>
  
 
<!-- odne komentar -->
 
<!-- odne komentar -->

Revision as of 13:44, 21 February 2024

CA Certificates

Overview

stub section Locate notes and refs here on CA cert creation and configuration.


^ To Configure CA Certificates

Command at third reference seems much like cert generating command given at LetsEncrypt tutorial at first reference link:

openssl req -x509 -out localhost.crt -keyout localhost.key \
-newkey rsa:2048 -nodes -sha256 \
-subj '/CN=localhost' -extensions EXT -config <( \
printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

And from LetsEncrypt tutorial:

openssl req -x509 -out localhost.crt -keyout localhost.key \
  -newkey rsa:2048 -nodes -sha256 \
  -subj '/CN=localhost' -extensions EXT -config <( \
   printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")