RootForum Community

Code: Select all

countryName_default             = DE
stateOrProvinceName_default     = Bundesland
localityName_default            = Stadt
0.organizationName_default      = Organization
organizationalUnitName_default  = Administration
commonName_default              = srv.example.org
emailAddress_default            = admin@example.org

Code: Select all

default_days    = 3650                  # how long to certify for
default_crl_days= 30                    # how long before next CRL
default_md      = sha256                # which md to use.

Code: Select all

default_bits            = 4096

Code: Select all

cd /etc/ssl
mv -f demoCA demoCA_back
mkdir -p demoCA
mkdir -p demoCA/certs
mkdir -p demoCA/crl
mkdir -p demoCA/newcerts
mkdir -p demoCA/private
touch demoCA/index.txt
echo `openssl rand -hex 8 | tr "[:lower:]" "[:upper:]"` > demoCA/serial && cp demoCA/serial demoCA/crlnumber

openssl genrsa -aes256 -out demoCA/private/cakey.pem 4096
openssl req -sha256 -new -key demoCA/private/cakey.pem -out demoCA/careq.pem
openssl ca -days 3650 -md sha256 -selfsign -extensions v3_ca -batch -keyfile demoCA/private/cakey.pem -in demoCA/careq.pem -out demoCA/cacert.pem
openssl ca -gencrl -keyfile demoCA/private/cakey.pem -cert demoCA/cacert.pem -out cacrl.pem
openssl crl -inform PEM -in cacrl.pem -outform DER -out crl.pem

openssl genrsa -aes256 -out srv.example.org_key.pem 4096
openssl req -sha256 -new -key srv.example.org_key.pem -out srv.example.org_req.pem
openssl ca -days 3650 -md sha256 -policy policy_anything -in srv.example.org_req.pem -out srv.example.org_cert.pem
openssl rsa -in srv.example.org_key.pem -out srv.example.org_keyrsa.pem

Code: Select all

countryName_default             = DE
stateOrProvinceName_default     = Hamburg
localityName_default            = Hamburg
0.organizationName_default      = RootForum Community
organizationalUnitName_default  = Administration
commonName_default              = devnull.rootforum.org
emailAddress_default            = admin@rootforum.org