SSL Certificates: Difference between revisions

From MK Wiki EN
Jump to navigation Jump to search
m (Private key size changed to 4096)
Line 1: Line 1:
== Create private authority ==
== Create private authority ==


  openssl genrsa -out ''XXX''-key.pem 1024
  openssl genrsa -out ''XXX''-key.pem 4096
  openssl req -new -key ''XXX''-key.pem -out ''XXX''.csr
  openssl req -new -key ''XXX''-key.pem -out ''XXX''.csr



Revision as of 05:51, 17 April 2023

Create private authority

openssl genrsa -out XXX-key.pem 4096
openssl req -new -key XXX-key.pem -out XXX.csr

File XXX-key.pem begins with this line:

-----BEGIN RSA PRIVATE KEY-----

File XXX.csr begins with this line:

-----BEGIN CERTIFICATE REQUEST-----

Create certificate signed by private authority

Certificate would be valid for 4 years.

openssl x509 -days 1461 -req -in XXX.csr -signkey XXX-key.pem -out XXX.pem

View certificate information

openssl x509 -in XXX.pem -noout -text