ssl:generate-certificates-self-signed
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
ssl:generate-certificates-self-signed [2020/08/08 18:45] – odefta | ssl:generate-certificates-self-signed [2023/07/04 19:36] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 123: | Line 123: | ||
An optional company name []: | An optional company name []: | ||
</ | </ | ||
+ | |||
+ | ===== Create extension file (ssl.conf) ===== | ||
+ | |||
+ | <file ini ssl.conf> | ||
+ | [ req ] | ||
+ | default_bits | ||
+ | distinguished_name = req_distinguished_name | ||
+ | req_extensions | ||
+ | |||
+ | [ req_distinguished_name ] | ||
+ | countryName | ||
+ | countryName_default | ||
+ | stateOrProvinceName | ||
+ | stateOrProvinceName_default = Romania | ||
+ | localityName | ||
+ | localityName_default | ||
+ | organizationName | ||
+ | organizationName_default | ||
+ | commonName | ||
+ | commonName_max | ||
+ | commonName_default | ||
+ | |||
+ | [ req_ext ] | ||
+ | subjectAltName = @alt_names | ||
+ | |||
+ | [alt_names] | ||
+ | DNS.1 = item-ax | ||
+ | DNS.2 = item-ax.com | ||
+ | </ | ||
===== Generate the actual certificate (int1.crt) singed by the Root CA (ca.crt) ===== | ===== Generate the actual certificate (int1.crt) singed by the Root CA (ca.crt) ===== | ||
< | < | ||
- | openssl x509 -req -in int1.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out int1.crt -days 1000 -sha256 | + | openssl x509 -req -in int1.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out int1.crt -days 1000 -sha256 |
</ | </ | ||
Line 133: | Line 162: | ||
< | < | ||
Signature ok | Signature ok | ||
- | subject=C = RO, ST = Romania, L = Bucharest, O = AX, OU = AX Software, CN = item-ax32034, emailAddress = item@ax.com | + | subject=C = RO, ST = Romania, L = Bucharest, O = AX, OU = AX Software, CN = item-ax, emailAddress = item@ax.com |
Getting CA Private Key | Getting CA Private Key | ||
Enter pass phrase for ca.key: | Enter pass phrase for ca.key: |
ssl/generate-certificates-self-signed.1596901536.txt.gz · Last modified: 2023/07/04 19:36 (external edit)