-
Notifications
You must be signed in to change notification settings - Fork 0
Creating Local CA and signed cert
Sal Tijerina edited this page Oct 21, 2021
·
1 revision
- Generate RSA-2048 key for CA:
openssl genrsa -des3 -out ca.key 2048
(This file should already be in the repo) - Generate root CA certificate:
openssl req -x509 -new -nodes -key ca.key -sha256 -days 365 -out ca.pem
(Root CA cert is valid for 365 days. Keep any form values to "CEP CA") - Generate RSA-2048 key for local dev site:
openssl genrsa out cep.dev.key 2048
(This file should already be in the repo) - Generate Cert Request (CSR):
openssql req -new -key -cep.dev.key -out cep.dev.csr
(Keep any form values to "CEP CA") - Make sure
cep.dev.ext
is correct - Generate Cert:
openssl x509 -req -in cep.dev.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out cep.dev.crt -days 365 -sha256 -extfile cep.dev.ext
(Cert is valid for 365 days. Keep default form values defined in .conf file) - Files created:
cep.dev.key
(site private key),cep.dev.csr
(site certificate signing request),cep.dev.crt
(actual site certificate),ca.key
(CA private key) andca.pem
(CA certificate).
TACC ACI WMA Core-Portal Project Documentation