LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   OpenSSL: generate Intermediate CA? (https://www.linuxquestions.org/questions/linux-security-4/openssl-generate-intermediate-ca-402471/)

new_to_open_ssl 01-24-2006 07:29 AM

Quote:

Originally Posted by stickman
Do you mean the cert generated from the CSR? Most applications using SSL require just the initial key and the matching cert to start.

In Openssl after a root CA has ben generated here are the following commands to create an intermediate CA;

as root

cd /export/certificate
mkdir (directory name)
cd (directory name)
cp /export/certificate/CA.pl .
./CA.pl –newca
/export/certificate/Somedirectory/ROOT_CA_CERT.pem
cd demoCA/private
cp /export/certificate/Somedirectory/ROOT_CA_KEY.pem
cp ROOT_CA_KEY.pem cakey.pem
chmod 775 cakey.pem
cd ..
chmod 775 cacert.pem

./CA.pl -newreq
Passphrase : Demo
Country: US
State: New York
City: Anytown
Some Corporation
some Generic Certificate Authority (usually a server)
Enter
Enter

./CA.pl –signCA
PassPhrase: Demo

newreq.pem is key with CSR request inside
newcert.pem is certificate


All times are GMT -5. The time now is 04:14 AM.