User Tools

Site Tools


sign_ssl_certificates_with_own_ca

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
sign_ssl_certificates_with_own_ca [2015/03/04 08:26] herwarthsign_ssl_certificates_with_own_ca [2017/06/22 20:00] (current) herwarth
Line 1: Line 1:
-{{tag>linux}} +======Sign SSL cetificate with own CA====== 
-====Sign SSL cetificate with own CA==== +=====Configuration===== 
-on ca.mngt.rtd.helux.nl+====Create SSL certificate request in one line==== 
 +  openssl req -new -nodes -keyout cloud.key -out cloud.csr -subj "/C=NL/ST=ZH/L=Bergschenhoek/O=Helux/CN=cloud.mngt.bh.helux.nl" 
 +  openssl req -new -nodes -keyout cloud.key -out cloud.csr -subj "/C=NL/ST=ZH/L=Bergschenhoek/O=Helux/CN=cloud.mngt.bh.helux.nl"-reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:cloud.mngt.bh.helux.nl")) 
 +====CA server configuration==== 
 +Create P12 certificate 
 +  openssl pkcs12 -export -out cacert.p12 -inkey key.pem -in cert.pem 
 + 
 +====CA-server==== 
 +(ca.mngt.rtd.helux.nl)
  
   cd /opt   cd /opt
Line 21: Line 29:
   openssl pkcs12 -export -out ios_sslvpn/device.p12 -inkey ios_sslvpn/devicekey.pem -in ios_sslvpn/devicecert.pem -certfile ios_sslvpn/devicecert.pem   openssl pkcs12 -export -out ios_sslvpn/device.p12 -inkey ios_sslvpn/devicekey.pem -in ios_sslvpn/devicecert.pem -certfile ios_sslvpn/devicecert.pem
  
 +====Juniper MAG====
 Import CA certificate in Juniper MAG Import CA certificate in Juniper MAG
   System > Configuration > Certificates > Trusted Client CAs > "Import CA Certificate..."   System > Configuration > Certificates > Trusted Client CAs > "Import CA Certificate..."
  
 +====iPhone/iPad====
 Import p12 certificate in iOS using iPhone Configuration Utility Import p12 certificate in iOS using iPhone Configuration Utility
 +
 +{{tag>linux}}
 +
sign_ssl_certificates_with_own_ca.1425457585.txt.gz · Last modified: by herwarth