Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
languagebash
titleExample how to create ECDSA private key and certificatePrivate Key and Certificate using ECDSA encryption
linenumberstrue
collapsetrue
# navigate to the Agent's <agent-data>\config\private directory
Set-Location $env:Programdata\sos-berlin.com\js7\agent\config\private

# create Private Key
#   for use with passphrase add: -passout pass:"secret"
openssl ecparam -name secp384r1 -genkey -noout -out agent.key

# create Certificate Signing Request
openssl req -new -sha512 -nodes -key agent.key -out agent.csr -subj "/C=DE/ST=Berlin/L=Berlin/O=SOS/OU=IT/CN=Agent"

# create Certificate
$user_crt_tmp_file = New-TemporaryFile
"keyUsage=critical,keyAgreement,keyEncipherment" | Out-File $user_crt_tmp_file

#   for passphrase add: -passin pass:"secret"
openssl x509 -req -sha512 -days 1825 -signkey agent.key -in agent.csr -out agent.crt -extfile $user_crt_tmp_file
Remove-Item -Path $user_crt_tmp_file -Force

...