Page History
...
| Code Block | ||||||
|---|---|---|---|---|---|---|
| ||||||
# Generate Root Certificate Authority (CA) Private Key openssl ecparam -name prime256v1 -genkey -noout -out root-ca.key # Generate Root CA Certificate openssl req -new -x509 -sha256 -key root-ca.key -out root-ca.crt # You are about to be asked to enter information that will be incorporated # into your certificate request. # What you are about to enter is what is called a Distinguished Name or a DN. # There are quite a few fields but you can leave some blank # For some fields there will be a default value, # If you enter '.', the field will be left blank. # ----- # Country Name (2 letter code) [XX]:DE # State or Province Name (full name) []:Berlin # Locality Name (eg, city) [Default City]:Berlin # Organization Name (eg, company) [Default Company Ltd]:SOS # Organizational Unit Name (eg, section) []:JS7 # Common Name (eg, your name or your server's hostname) []:JS7 Deployment CA # Email Address []: |
Explanation:
As a response to the second command the OpenSSL utility prompts for a number of specifications for the Distinguished Name, i.e. the unique name of the Root CA Certificate:
Country Name: a 2 letter country code is expected as stated for example with https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2State or Province Name: the name of a state is expectedLocality Name: the name of a city is expectedOrganization Name: arbitrary input is allowedOrganizational Unit Name: arbitrary input is allowedCommon Name: an arbitrary name can be chosen as the name of the Root CAEmail Address: empty input is allowed
| Anchor | ||||
|---|---|---|---|---|
|
...
Overview
Content Tools