Page History

...

• CA signed certificates are issued by a know Certificate Authority (CA).
• Self-signed certificates are created by the user and are not related to a known CA.

There is no difference concerning the type of X.509 certificates, the usage for Server Authentication / Client Authentication, or the encryption of connections.

...

As an alternative to running OpenSSL commands in an interactive shell some a few scripts are provided that perform this task.

...

• Download: create_certificate.sh
• The shell script is executed with two arguments:
  • The DNS hostname of the server that should receive the certificate. A server can be assigned more than one DNS hostname, for example its the FQDN can be different. All DNS hostnames have to be extend the hostname. Only DNS hostnames that are added to the certificate in order can be used to establish secure connections.
  • The lifetime of the certificate is specified by the number of days.
    
    

...