New

 

CA Certification Authority

 

Create a new CA

 

cd demoCA
openssl req -newkey rsa:2048 -new -x509 -keyout cakey.pem -out cacert.pem
mkdir newcerts
touch index.txt
echo 00 > serial
cd ..

Certificate emission

openssl ca -keyfile demoCA/cakey.pem -cert demoCA/cacert.pem -in MYHOME/certs/cert.csr -out MYHOME/certs/cert.pem -days 1095 -policy policy_anything
openssl x509 -in MYHOME/certs/cert.pem -fingerprint -sha1 -noout
openssl ca -keyfile demoCA/cakey.pem -cert demoCA/cacert.pem -in MYHOME2/certs/cert.csr -out MYHOME2/certs/cert.pem -days 1095 -policy policy_anything
openssl x509 -in MYHOME2/certs/cert.pem -fingerprint -sha1 -noout