Just as an FYI, there's a Makefile in the /etc/pki/tls/certs directory
that "makes" key/cert generation relatively painless. I'm not familiar
with the various options yet, but here's what it says about itself:
# make -f /etc/pki/tls/certs/Makefile
This makefile allows you to create:
o public/private key pairs
o SSL certificate signing requests (CSRs)
o self-signed SSL test certificates
To create a key pair, run "make SOMETHING.key".
To create a CSR, run "make SOMETHING.csr".
To create a test certificate, run "make SOMETHING.crt".
To create a key and a test certificate in one file, run "make
SOMETHING.pem".
To create a key for use with Apache, run "make genkey".
To create a CSR for use with Apache, run "make certreq".
To create a test certificate for use with Apache, run "make testcert".
To create a test certificate with serial number other than zero, add
SERIAL=num
Examples:
make server.key
make server.csr
make server.crt
make stunnel.pem
make genkey
make certreq
make testcert
make server.crt SERIAL=1
make stunnel.pem SERIAL=2
make testcert SERIAL=3
#
It'd be nice to have something on the wiki about this.
Any takers?
--
-Eric 'shubes'
On 08/17/2012 02:40 AM, Tony White wrote:
Run this then....
openssl genrsa -out ca.key 1024
openssl req -new -key ca.key -out ca.csr
openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt
cp ca.crt /etc/pki/tls/certs
cp ca.key /etc/pki/tls/private/ca.key
cp ca.csr /etc/pki/tls/private/ca.csr
best wishes
Tony White
On 17/08/2012 19:01, Vijay Thakur wrote:
Thanks, the command is executed as told. i am getting the bellow error :
[root@li496-23 ~]# Generate private key
-bash: Generate: command not found
With Regards,
Vijay Thakur
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
