openssl3.2/test/certs - 027 - server intermediate ca: sca-cert

文章目录

    • [openssl3.2/test/certs - 027 - server intermediate ca: sca-cert](#openssl3.2/test/certs - 027 - server intermediate ca: sca-cert)
    • 概述
    • 笔记
    • END

openssl3.2/test/certs - 027 - server intermediate ca: sca-cert

概述

openssl3.2 - 官方demo学习 - test - certs

笔记

// \file my_openssl_linux_log_doc_027.txt

// \note openssl3.2/test/certs - 027 - server intermediate ca: sca-cert

// --------------------------------------------------------------------------------

// 官方脚本

// --------------------------------------------------------------------------------

// openssl3.2/test/certs - 027 - server intermediate ca: sca-cert

./mkcert.sh genca -p serverAuth "CA" ca-key sca-cert root-key root-cert

// --------------------------------------------------------------------------------

// openssl cmd line parse

// --------------------------------------------------------------------------------

// cmd 1:

openssl genpkey -algorithm rsa -pkeyopt rsa_keygen_bits:2048 -out ca-key.pem

// cmd 2:

// config file = cfg_exp027_cmd2.txt

string_mask=utf8only

req

prompt = no

distinguished_name = dn

dn

CN = CA

openssl req -new -sha256 -key ca-key.pem -config cfg_exp027_cmd2.txt -out ca-key-req.pem

cmd 3:

// config file = cfg_exp027_cmd3.txt

basicConstraints = critical,CA:true

keyUsage = keyCertSign,cRLSign

subjectKeyIdentifier = hash

authorityKeyIdentifier = keyid

extendedKeyUsage = serverAuth

openssl x509 -req -sha256 -out sca-cert.pem -extfile cfg_exp027_cmd3.txt -CA root-cert.pem -CAkey root-key.pem -set_serial 2 -days 36525 -in ca-key-req.pem

// --------------------------------------------------------------------------------

// openssl log

// --------------------------------------------------------------------------------

openssl genpkey -algorithm rsa -pkeyopt rsa_keygen_bits:2048 -out ca-key.pem

openssl req -new -sha256 -key ca-key.pem -config /dev/fd/63

-config /dev/fd/63 => /home/lostspeed/openssl/openssl-3.2.0_debian/test/certs/my_openssl_linux_log.txt

string_mask=utf8only

req

prompt = no

distinguished_name = dn

dn

CN = CA

openssl x509 -req -sha256 -out sca-cert.pem -extfile /dev/fd/63 -CA root-cert.pem -CAkey root-key.pem -set_serial 2 -days 36525

-extfile /dev/fd/63 => /home/lostspeed/openssl/openssl-3.2.0_debian/test/certs/my_openssl_linux_log.txt

basicConstraints = critical,CA:true

keyUsage = keyCertSign,cRLSign

subjectKeyIdentifier = hash

authorityKeyIdentifier = keyid

extendedKeyUsage = serverAuth

END

相关推荐
王小义笔记7 天前
windows电脑如何执行openssl rand命令
windows·openssl
Humbunklung10 天前
VC++ 使用OpenSSL创建RSA密钥PEM文件
开发语言·c++·openssl
深耕AI1 个月前
Win64OpenSSL-3_5_2.exe【安装步骤】
openssl
看那山瞧那水1 个月前
DELPHI 利用OpenSSL实现加解密,证书(X.509)等功能
delphi·openssl
洋哥网络科技1 个月前
openssl升级
openssl
Lazy Dave2 个月前
gmssl私钥文件格式
网络安全·ssl·openssl
沉在嵌入式的鱼3 个月前
RK3588移植Openssl库
linux·rk3588·openssl
黑屋里的马3 个月前
ssl相关命令生成证书
服务器·网络·ssl·openssl·gmssl
fangeqin3 个月前
ubuntu源码安装python3.13遇到Could not build the ssl module!解决方法
linux·python·ubuntu·openssl
API开发3 个月前
苹果芯片macOS安装版Homebrew(亲测) ,一键安装node、python、vscode等,比绿色软件还干净、无污染
vscode·python·docker·nodejs·openssl·brew·homebrew