Differences

This shows you the differences between two versions of the page.

--- admintasks:makecert [2008/05/18 23:58] – external edit 127.0.0.1
+++ admintasks:makecert [2014/08/14 14:02] (current) – [server certificate] hop
@@ Line 4: / Line 4: @@
 <code bash>
-openssl genrsa -des3 -out private/ca.key 1024
+openssl genrsa -des3 -out private/ca.key 2048
 openssl req -new -x509 -days 3650 -key private/ca.key -out certs/ca.crt
 </code>
@@ Line 15: / Line 15: @@
 cd /etc/ssl/
-openssl genrsa -out $SITE.key 1024
+openssl genrsa -out $SITE.key 2048
-openssl req -new -key $SITE.key -out $SITE.csr
+openssl req -new -sha256 -key $SITE.key -out $SITE.csr
 openssl ca -out $SITE.crt -infiles $SITE.csr
@@ Line 25: / Line 25: @@
 </code>
-Probleme:
+oder:
+<code bash>
+openssl req -new -sha256 -subj /CN=$SITE -newkey rsa:2048 -nodes -keyout $SITE.key -out $SITE.csr
+</code>
-  * Backspace tut nicht
+self sign:
+<code bash>
+openssl x509 -req -days 3650 -in $SITE.csr -signkey $SITE.key -out $SITE.crt
+</code>
 httpd.conf:
@@ Line 35: / Line 41: @@
 SSLCertificateKeyFile /etc/ssl/private/wildcard_30hopsmax_at.crt
 </code>
+===== CSR für CACert mit SubAltNames =====
+http://wiki.cacert.org/VhostTaskForce#Shell_Script