Open SSL newbie

Discussion in 'Server Operation' started by naffcat, Aug 16, 2011.

  1. naffcat

    naffcat New Member

    Hi, please can you advise...

    We have some web servers and I want to create self signed certificates for

    I want to create my own certification authority keys and certificate, that will be imported to all web browsers of our users

    And I would like to create certificates, that will be signed by my own
    certification authority

    I believe this can be done with either OpenSSL or (not sure of the merits of either) ? :confused:
  2. falko

    falko Super Moderator ISPConfig Developer

  3. naffcat

    naffcat New Member

    OpenSSL cont.

    These are the steps I'm trying to achieve but having a few challenges with ...

    1) Creating CA:
    openssl genrsa -des3 -out ca.key 2048
    openssl req -new -x509 -key ca.key -out ca.crt

    2) Creating server key and certification request:
    openssl genrsa -des3 -out server.key 2048
    openssl req -new -key server.key -out server.csr

    3) Signing request with CA (created in step 1)
    openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial server.crt –days 365

    Couple of things that don't seem to work -days 365 option (I keep defaulting to 30) and unable to omit pass phrase?
  4. falko

    falko Super Moderator ISPConfig Developer

    Do you get any error messages?

Share This Page