diff --git a/infotro/SDi/labs/SSL/README.md b/infotro/SDi/labs/SSL/README.md new file mode 100644 index 0000000..0b6868b --- /dev/null +++ b/infotro/SDi/labs/SSL/README.md @@ -0,0 +1,29 @@ +

+Lab OpenSSL & Certificates +

+ +---------- + +A certificate is a digital document that certifies the ownership of a public key by the named subject of the certificate. +The certificate is signed by a certificate authority (CA) that is trusted by the parties who trust the certificate. +The certificate authority is responsible for verifying the identity of the certificate holder and signing the certificate. + +## Create an RSA key +```bash +openssl genrsa -out .key 2048 +``` + +## Self-sign root certificate +```bash +openssl req -new -x509 -days 365 -key ca.key -config ca.cnf -out ca.crt +``` + +## Create a request +```bash +openssl req -new -sha256 -key .key -config .cnf -out .csr +``` + +## Sign a request with root certificate +```bash +openssl ca -config ca_ssl.cnf -in .csr -out .crt +``` \ No newline at end of file