Category: openssl

Create a P7B certificates bundle 0

Create a P7B certificates bundle

P7B certificates file can contain one or more certificates and a revocation list. The difference with P12 (PKCS#12), P7B (PKCS#7) cannot contain private keys. To create a P7B file Assuming you have frank.pem and...

Create a DER encoded X509 certificate 0

Create a DER encoded X509 certificate

Two types of X509 certificates There are base64 encoded certificates which look like -----BEGIN CERTIFICATE----- MIIFcDCCA1gCAhAAMA0GCSqGSIb3DQEBCwUAMHExCzAJBgNVBAYTAkdCMRAwDgYD (...) lcH2kxKqa1CWUQGz3S9raNtesOI7jbO9d2HRVPPTPVTliHukS8tlBouq5tU6IFgH I61lVg== -----END CERTIFICATE----- Then there are DER encoded certificates which look like To convert base64 to...

Create an intermediate CA 0

Create an intermediate CA

First step is required. If you don't I wrote the instructions to setup a root CA. 1. Create folders (you are free to choose where) and add basic files: cd /etc/pki/tls/ mkdir intermediate-ca cd intermediate-ca...

How to install a CA signed SSL certificate 0

How to install a CA signed SSL certificate

Apache (...) SSLEngine on SSLCertificateFile /path/to/website.crt SSLCertificateKeyFile /path/to/private.key SSLCACertificateFile /path/to/root_bundle.crt What is the use of you might say ? It is primary the same as SSLCertificateChainFile but it also permits the use of the...

Create your own CA certificate authority to sign SSL 0

Create your own CA certificate authority to sign SSL

mkdir -p root-ca/{conf,private,public} chmod 600 root-ca/private/ cd root-ca/ mkdir signed-keys echo "01" > conf/serial touch conf/index Create a new file in root-ca/conf/openssl.cnf with the following content [ req ]default_bits            = 2048 default_keyfile         = ./private/root.pem...