Signing SSL Certificates

---
Title: Signing SSL Certificates
Date: 2023-05-08
Sequence: 4
Tags: ["linux","ssl","sysadmin"]
---

Convert a pfx file to a crt and a key:

openssl pkcs12 -in root.pfx -nocerts -out root.key
openssl pkcs12 -in root.pfx -clcerts -nokeys -out root.crt

Create a private key:

openssl genrsa -out private.key 2048

Create a CSR:

openssl req -new -key private.key -out csr.csr

Create a signed SSL certificate:

openssl x509 -req -in csr.csr -CA root.crt -CAkey root.key -CAcreateserial -out ssl_certificate.crt -days 365