- Configure:
vim /etc/ssl/openssl.cnf and change as necessary
echo 00 > /etc/ssl/serial
touch /etc/ssl/index.txt
- Generate the CA:
openssl req -new -x509 -keyout /etc/ssl/private/cakey.pem -out /etc/ssl/cacert.pem -config /etc/ssl/openssl.cnf
- Generate the certificate:
openssl req -new -nodes -keyout newkey.pem -out newreq.pem -days 365 -config /etc/ssl/openssl.cnf
cat newreq.pem newkey.pem > new.pem
- Sign the certificate:
openssl ca -policy policy_anything -out newcert.pem -config /etc/ssl/openssl.cnf -infiles new.pem
- To convert the certificate to PKCS#12:
openssl pkcs12 -export -in newcert.pem -inkey newkey.pem -out certfile.p12
Leave a Reply