Difference between revisions of "Openssl without openssl.cnf"
Jump to navigation
Jump to search
(Created page with "https://stackoverflow.com/questions/36920558/is-there-anyway-to-specify-basicconstraints-for-openssl-cert-via-command-line ``` DAYS='240' SUBJECT='/CN=example.com/O=Example Co...") |
|||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | # With but simple | ||
| + | - https://serverfault.com/questions/571910/how-to-add-extended-key-usage-string-when-generating-a-self-signed-certificate-u | ||
| + | |||
| + | # Without | ||
| + | |||
https://stackoverflow.com/questions/36920558/is-there-anyway-to-specify-basicconstraints-for-openssl-cert-via-command-line | https://stackoverflow.com/questions/36920558/is-there-anyway-to-specify-basicconstraints-for-openssl-cert-via-command-line | ||
``` | ``` | ||
| Line 12: | Line 17: | ||
-subj "${SUBJECT}" \ | -subj "${SUBJECT}" \ | ||
-set_serial "${SERIAL}" | -set_serial "${SERIAL}" | ||
| + | |||
| + | -CAcreateserial | ||
``` | ``` | ||
| + | |||
| + | serial | ||
| + | |||
| + | https://stackoverflow.com/questions/66357451/why-does-signing-a-certificate-require-cacreateserial-argument | ||
Latest revision as of 21:11, 10 November 2023
With but simple
Without
DAYS='240'
SUBJECT='/CN=example.com/O=Example Co./OU=Engineering/L=Boston/ST=MA/C=US'
SERIAL='0x1001'
openssl req \
-addext basicConstraints=critical,CA:TRUE,pathlen:1 \
-outform pem -out cacert.pem \
-key privkey.pem -new -x509 \
-days "${DAYS}" \
-subj "${SUBJECT}" \
-set_serial "${SERIAL}"
-CAcreateserial
serial