Page History
...
| Code Block | ||||||
|---|---|---|---|---|---|---|
| ||||||
# Generate Root Certificate Authority (CA) Private Key
openssl ecparam -name prime256v1 -genkey -noout -out root-ca.key
# Generate Root CA Certificate
openssl req -new -x509 -sha256 -days 5475 -key root-ca.key -out root-ca.crt
# You are about to be asked to enter information that will be incorporated
# into your certificate request.
# What you are about to enter is what is called a Distinguished Name or a DN.
# There are quite a few fields but you can leave some blank
# For some fields there will be a default value,
# If you enter '.', the field will be left blank.
# -----
# Country Name (2 letter code) [XX]:DE
# State or Province Name (full name) []:Berlin
# Locality Name (eg, city) [Default City]:Berlin
# Organization Name (eg, company) [Default Company Ltd]:SOS
# Organizational Unit Name (eg, section) []:JS7
# Common Name (eg, your name or your server's hostname) []:JS7 Deployment CA
# Email Address []:
# Alternative: Generate Root Certificate Authority (CA) Private Key using passphrase
openssl ecparam -genkey -name secp256k1 | openssl ec -aes256 -passout pass:jobscheduler -out root-ca.key
# Generate Root CA Certificate
openssl req -new -x509 -sha256 -days 5475 -key root-ca.key -passin pass:jobscheduler -out root-ca.crt |
| Code Block | ||||||
|---|---|---|---|---|---|---|
| ||||||
# Generate Root Certificate Authority (CA) Private Key using passphrase
openssl ecparam -genkey -name secp256k1 | openssl ec -aes256 -passout pass:jobscheduler -out root-ca.key
# Generate Root CA Certificate
openssl req -new -x509 -sha256 -days 5475 -key root-ca.key -passin pass:jobscheduler -out root-ca.crt |
Explanation:
As a response to the second command the OpenSSL utility prompts for a number of specifications for the Distinguished Name, i.e. the unique name of the Root CA Certificate:
...
Overview
Content Tools