Wednesday | 28 FEB 2024
[ previous ]
[ next ]

Signing SSL Certificates

Date: 2023-05-08
Tags:  linux, ssl, sysadmin

Convert a pfx file to a crt and a key:

openssl pkcs12 -in root.pfx -nocerts -out root.key
openssl pkcs12 -in root.pfx -clcerts -nokeys -out root.crt

Create a private key:

openssl genrsa -out private.key 2048

Create a CSR:

openssl req -new -key private.key -out csr.csr

Create a signed SSL certificate:

openssl x509 -req -in csr.csr -CA root.crt -CAkey root.key -CAcreateserial -out ssl_certificate.crt -days 365