ca sign cert

Submitted by lepton on Wed, 07/29/2020 - 14:18


openssl genrsa -out cakey.pem 2048

openssl req -new -x509 -days 3650 -key cakey.pem -out cacert.pem

openssl genrsa -out c1.key 2048

openssl req -new -key c1.key -out c1.csr

#commonName = optional
openssl ca -in c1.csr -out c1.crt -days=3650 -create_serial

openssl pkcs12 -export -clcerts -in c1.pem -out c1.p12

Add new comment

Restricted HTML

  • Allowed HTML tags: <a href hreflang> <em> <strong> <cite> <blockquote cite> <code> <ul type> <ol start type> <li> <dl> <dt> <dd> <h2 id> <h3 id> <h4 id> <h5 id> <h6 id>
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.