Create a certificate with any expiry date
1. Create CA certificate and private key key
a. openssl genrsa -out ca.key 2048
b. openssl req -new -x509 -key ca.key -out ca.crt
b. openssl req -new -x509 -key ca.key -out ca.crt
2. Generate CSR
openssl req -out server.csr -new -newkey rsa:2048 -nodes -keyout server.key
3. Sign the CSR and create certificate
openssl ca -policy policy_anything -out clientcert.pem -startdate 190221080000Z -enddate 190221090000Z -cert ca.crt -keyfile ca.key -infiles server_anil.csr
These commands have to be executed for the above command to succeed:
mkdir -p demoCA/newcerts
touch demoCA/index.txt.attr
touch demoCA/index.txt
echo '01' > demoCA/serial
These commands have to be executed for the above command to succeed:
mkdir -p demoCA/newcerts
touch demoCA/index.txt.attr
touch demoCA/index.txt
echo '01' > demoCA/serial
No comments:
Post a Comment