Sdi lab ssl (#24)
This commit is contained in:
1 file changed
+29
@@ -0,0 +1,29 @@
|
|||||||
|
<header><h1>
|
||||||
|
Lab OpenSSL & Certificates
|
||||||
|
</h1></header>
|
||||||
|
|
||||||
|
----------
|
||||||
|
|
||||||
|
A certificate is a digital document that certifies the ownership of a public key by the named subject of the certificate.
|
||||||
|
The certificate is signed by a certificate authority (CA) that is trusted by the parties who trust the certificate.
|
||||||
|
The certificate authority is responsible for verifying the identity of the certificate holder and signing the certificate.
|
||||||
|
|
||||||
|
## Create an RSA key
|
||||||
|
```bash
|
||||||
|
openssl genrsa -out <name>.key 2048
|
||||||
|
```
|
||||||
|
|
||||||
|
## Self-sign root certificate
|
||||||
|
```bash
|
||||||
|
openssl req -new -x509 -days 365 -key ca.key -config ca.cnf -out ca.crt
|
||||||
|
```
|
||||||
|
|
||||||
|
## Create a request
|
||||||
|
```bash
|
||||||
|
openssl req -new -sha256 -key <my_site>.key -config <my_site>.cnf -out <my_site>.csr
|
||||||
|
```
|
||||||
|
|
||||||
|
## Sign a request with root certificate
|
||||||
|
```bash
|
||||||
|
openssl ca -config ca_ssl.cnf -in <my_site>.csr -out <my_site>.crt
|
||||||
|
```
|
||||||
Reference in new issue
Block a user