-
Notifications
You must be signed in to change notification settings - Fork 1
Creating Local CA and signed cert
Sal Tijerina edited this page Oct 21, 2021
·
1 revision
- Generate RSA-2048 key for CA:
openssl genrsa -des3 -out ca.key 2048(This file should already be in the repo) - Generate root CA certificate:
openssl req -x509 -new -nodes -key ca.key -sha256 -days 365 -out ca.pem(Root CA cert is valid for 365 days. Keep any form values to "CEP CA") - Generate RSA-2048 key for local dev site:
openssl genrsa out cep.dev.key 2048(This file should already be in the repo) - Generate Cert Request (CSR):
openssql req -new -key -cep.dev.key -out cep.dev.csr(Keep any form values to "CEP CA") - Make sure
cep.dev.extis correct - Generate Cert:
openssl x509 -req -in cep.dev.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out cep.dev.crt -days 365 -sha256 -extfile cep.dev.ext(Cert is valid for 365 days. Keep default form values defined in .conf file) - Files created:
cep.dev.key(site private key),cep.dev.csr(site certificate signing request),cep.dev.crt(actual site certificate),ca.key(CA private key) andca.pem(CA certificate).
TACC ACI WMA Core-Portal Project Documentation