admintasks:makecert

This is an old revision of the document!

Table of Contents

howto create self-signed certificates

howto create self-signed certificates

certificate authority

openssl genrsa -des3 -out private/ca.key 1024
openssl req -new -x509 -days 3650 -key private/ca.key -out certs/ca.crt

server certificate

SITE=example_com
 
cd /etc/ssl/
openssl genrsa -out $SITE.key 1024
openssl req -new -key $SITE.key -out $SITE.csr
openssl ca -out $SITE.crt -infiles $SITE.csr
 
rm newcerts/<index>.pem
rm $SITE.csr
mv $SITE.key private/
mv $SITE.crt certs/

Probleme:

Backspace tut nicht

httpd.conf:

SSLCertificateFile    /etc/ssl/certs/wildcard_30hopsmax_at.crt 
SSLCertificateKeyFile /etc/ssl/private/wildcard_30hopsmax_at.crt

CSR für CACert mit SubAltNames

http://wiki.cacert.org/VhostTaskForce#Shell_Script

admintasks/makecert.1290111479.txt.gz · Last modified: 2010/11/18 20:17 by hop