Page History

...

Creating the Root CA Certificate

Download: create_root_ca.sh

The following files will be created:

...

This step is performed just once. In case of renewal of the Root CA Certificate any Server Certificates will have to be renewed.

...

The shell script is executed without arguments.

./create_root_ca.sh

Creating a Server Certificate

Download: create_certificate.sh

The following files will be created with <server> being a placeholder for the hostname for which a certificate should be created.

...

This step is performed for each Server Certificate that should be created.

...

# ./create_certificate.sh --dns=<server-hostname>[,<server-hostname>] --days=<number-of-days>

# Example
./create_certificate.sh --dns=apmaccs,apmaccs.sos --days=365

The shell script is executed with two arguments:

• --dns
  • The DNS hostname of the server that should be assigned the certificate. A server can be assigned more than one DNS hostname, for example the FQDN can extend the hostname. Only DNS hostnames that are added to the certificate can be used to establish secure connections.
• --days
  • The lifetime of the certificate is specified by the number of days.
    

...

...

• • days

...

• • .

...