The first part of the configuration file contains some basic CA information, such as the name and the base URL, and the components of the CA’s distinguished name. OpenSSL configuration files are powerful before you proceed I suggest that you familiarize yourself with their capabilities ( man config on the command line). Configuration files aren’t needed most of the time, during normal usage, but they are essential when it comes to complex operations, such as root CA creation. 1 Root CA Configurationīefore we can actually create a CA, we need to prepare a configuration file ( nf) that will tell OpenSSL exactly how we want things set up. This section describes the process as well as the common CA operations. ![]() Creating a new CA involves several steps: configuration, creation of a directory structure and initialization of the key files, and finally generation of the root key and certificate.
0 Comments
Leave a Reply. |