Sdi lab ssl (#24)

This commit is contained in:
Rémi Heredero authored and GitHub committed 2024-04-05 14:18:12 +02:00
commit 525d5d466c
1 file changed
+29
+29
View File
@@ -0,0 +1,29 @@
<header><h1>
Lab OpenSSL & Certificates
</h1></header>
----------
A certificate is a digital document that certifies the ownership of a public key by the named subject of the certificate.
The certificate is signed by a certificate authority (CA) that is trusted by the parties who trust the certificate.
The certificate authority is responsible for verifying the identity of the certificate holder and signing the certificate.
## Create an RSA key
```bash
openssl genrsa -out <name>.key 2048
```
## Self-sign root certificate
```bash
openssl req -new -x509 -days 365 -key ca.key -config ca.cnf -out ca.crt
```
## Create a request
```bash
openssl req -new -sha256 -key <my_site>.key -config <my_site>.cnf -out <my_site>.csr
```
## Sign a request with root certificate
```bash
openssl ca -config ca_ssl.cnf -in <my_site>.csr -out <my_site>.crt
```