Page History

...

• CA-signed certificates are issued by a known and trusted Certificate Authority (CA) that validates the domain owner.
• Self-signed certificates are created by the user and are not related to a known CA.

...

This step is performed just once. In case of renewal of the Root CA Certificate any server certificates Server Certificates will have to be renewed.

• Download: create_root_ca.sh
• The shell script is executed without arguments.
  
  

...

This step is performed for each server certificate Server Certificate that should be created.

• Download: create_certificate.sh
• The shell script is executed with two arguments:
  • The DNS hostname of the server that should be assigned the certificate. A server can be assigned more than one DNS hostname, for example the FQDN can extend the hostname. Only DNS hostnames that are added to the certificate can be used to establish secure connections.
  • The lifetime of the certificate is specified by the number of days.
    
    

...