/docs/MyDocs

To get this branch, use:
bzr branch http://darksoft.org/webbzr/docs/MyDocs

« back to all changes in this revision

Viewing changes to Administration/Linux/daemons/x509ca/ca.txt

  • Committer: Suren A. Chilingaryan
  • Date: 2009-04-09 03:21:08 UTC
  • Revision ID: csa@dside.dyndns.org-20090409032108-w4edamdh4adrgdu3
import

Show diffs side-by-side

added added

removed removed

Lines of Context:
Administration/Linux/daemons/x509ca/ca.txt
 
1
Creating SelfSigned Certificate for CA
 
2
--------------------------------------
 
3
    openssl req -new -x509 -days ### -keyout DarkSoft.key -out DarkSoft.cert
 
4
    
 
5
    1. Viewing info: 
 
6
        openssl req -noout -text -in DarkSoft.cert
 
7
    2. Converting to DER format: 
 
8
        openssl x509 -in DarkSoft.cert -out DarkSoft.der -outform DER
 
9
    3. Removing password
 
10
         openssl rsa -in server.key.enc -out server.key
 
11
 
 
12
Preparing Directory Structure
 
13
-----------------------------
 
14
    /opt/ssl:
 
15
        ca (d)
 
16
            private (d 0700)
 
17
                DarkSoft.key
 
18
                .rand <- "Some random data!"
 
19
            serial <- "01"
 
20
            DarkSoft.cert
 
21
            DarkSoft.der
 
22
        certs (d)
 
23
        crl (d)
 
24
        newcerts (d)
 
25
        index.txt <- "Empty!"
 
26
 
 
27
    Configure '/usr/lib/ssl/openssl.cnf' to this settings!
 
28
 
 
29
Signing Certificate
 
30
-------------------
 
31
    openssl ca -policy policy_anything -out somehost.cert -infiles somehost.req
 
32
    
 
33
    'somehost.cert' now contains signed certificate!    
 
34
    
 
35
Installing CA into browser
 
36
--------------------------
 
37
    Content-Type: application/x-509-ca-cert
 
38
    Content-Length: certificate length
 
39
    CA certificate