SSL Certificates

Creating CA Certificates

• openssl req -x509 -newkey rsa:4096 -days 365 -keyout ca.key -out ca.crt

• openssl x509 -in ca.crt -noout -text

Creating Server Certificate Signing Request

• openssl req -newkey rsa:4096 -keyout server.key -out server.req

• openssl req -newkey rsa:4096 -keyout server.key -out server.req -subj"/C=IN/ST=Gujarat/L=Ahmedabad/O=PTC/OU=PTC/CN=PTC/emailAddress=[e-mail]”

Sign the server request using CA certificates

• openssl x509 -req -in server.req -CA ca.crt -CAkey ca.key -CAcreateserial -out server-signed-cert.crt

• openssl x509 -in server-signed-cert.crt -noout -text