SSL Certificate signed by your own CA - Revision history

10.0.0.200 at 19:32, 10 October 2023

2023-10-10T19:32:53Z

@@ Line 16: / Line 16: @@
   ''to check CSR''
    openssl req -in rbaServerCert.csr -noout -text
 . Generate and sign certificate

10.0.0.200 at 19:27, 10 October 2023

2023-10-10T19:27:28Z

10.0.0.200: Created page with "1. Generate self-signed root CA certificate mkdir -p /root/internalca cd /root/internalca openssl genrsa -out rootCAKey.pem 2048 openssl req -x509 -sha256 -new -node..."

2023-10-10T19:25:53Z

Created page with "1. Generate self-signed root CA certificate mkdir -p /root/internalca cd /root/internalca openssl genrsa -out rootCAKey.pem 2048 openssl req -x509 -sha256 -new -node..."

New page

1. Generate self-signed root CA certificate
mkdir -p /root/internalca
cd /root/internalca

openssl genrsa -out rootCAKey.pem 2048
openssl req -x509 -sha256 -new -nodes -key rootCAKey.pem -days 3650 -out rootCACert.pem
to check it
openssl x509 -in rootCACert.pem -text

2. Generate certificate request
mkdir -p /tmp/rbakeys
cd /tmp/rbakeys

openssl genrsa -out rbaServerKey.pem 2048
openssl req -new -key rbaServerKey.pem -sha256 -out rbaServerCert.csr
to check CSR
openssl req -in rbaServerCert.csr -noout -text

3. Generate and sign certificate
openssl x509 -req -sha256 -in rbaServerCert.csr -CA /root/internalca/rootCACert.pem -CAkey /root/internalca/rootCAKey.pem -CAcreateserial -out rbaServerCert.pem -days 365
to check certificate
openssl x509 -in rbaServerCert.pem -text -noout

← Older revision		Revision as of 19:27, 10 October 2023
Line 5:		Line 5:
	openssl genrsa -out rootCAKey.pem 2048		openssl genrsa -out rootCAKey.pem 2048
	openssl req -x509 -sha256 -new -nodes -key rootCAKey.pem -days 3650 -out rootCACert.pem		openssl req -x509 -sha256 -new -nodes -key rootCAKey.pem -days 3650 -out rootCACert.pem
	to check it		''to check it''
	openssl x509 -in rootCACert.pem -text		openssl x509 -in rootCACert.pem -text

Line 14:		Line 14:
	openssl genrsa -out rbaServerKey.pem 2048		openssl genrsa -out rbaServerKey.pem 2048
	openssl req -new -key rbaServerKey.pem -sha256 -out rbaServerCert.csr		openssl req -new -key rbaServerKey.pem -sha256 -out rbaServerCert.csr
	to check CSR		''to check CSR''
	openssl req -in rbaServerCert.csr -noout -text		openssl req -in rbaServerCert.csr -noout -text

	3. Generate and sign certificate		3. Generate and sign certificate
	openssl x509 -req -sha256 -in rbaServerCert.csr -CA /root/internalca/rootCACert.pem -CAkey /root/internalca/rootCAKey.pem -CAcreateserial -out rbaServerCert.pem -days 365		openssl x509 -req -sha256 -in rbaServerCert.csr -CA /root/internalca/rootCACert.pem -CAkey /root/internalca/rootCAKey.pem -CAcreateserial -out rbaServerCert.pem -days 365
	to check certificate		''to check certificate''
	openssl x509 -in rbaServerCert.pem -text -noout		openssl x509 -in rbaServerCert.pem -text -noout