Preparation of using OpenSSL

digitaldreamer 2007-01-23

展開(kāi)全文

Env Setup

Create a working directory called c:\ssl
Create three sub folders named as keys, requests and certs under c:\ssl.
Drop the openssl.conf into the working folder, c:\ssl.
Create an empty database.txt in working directory.
Create the serial number file serial.txt in working directory. This is a plain ASCII file containing the string "01" on the first line, followed by a newline.

Setup a CA

Generate CA‘s private key (rsa, des, 1024b).

c:\ssl\openssl genrsa -des3 -out keys/ca.key 1024

Meanwhile you need to provide a pass phrase for this private key.

The generated key file is in PEM format ???

Create a CA certificate based on this private key in c:\ssl\certs folder.

C:\ssl>openssl req -config openssl.conf -new -x509 -days 1001 -key keys/ca.key -out certs/ca.cer

The ca.cer is also in PEM format.

本站是提供個(gè)人知識(shí)管理的網(wǎng)絡(luò)存儲(chǔ)空間，所有內(nèi)容均由用戶(hù)發(fā)布，不代表本站觀點(diǎn)。請(qǐng)注意甄別內(nèi)容中的聯(lián)系方式、誘導(dǎo)購(gòu)買(mǎi)等信息，謹(jǐn)防詐騙。如發(fā)現(xiàn)有害或侵權(quán)內(nèi)容，請(qǐng)點(diǎn)擊一鍵舉報(bào)。

轉(zhuǎn)藏 分享

QQ空間 QQ好友新浪微博微信

獻(xiàn)花（0） +1

來(lái)自： digitaldreamer > 《Security》

舉報(bào)/認(rèn)領(lǐng)