Sena STS Series Betriebsanweisung PDF herunterladen (Seite 127)

127

Step 3. Check whether CA key file(demoCA/private/cakey.pem) and CA certificate

(demoCA/cacert.pem) is generated

# ls demoCA/

cacert.pem certs crl index.txt newcerts

private serial

# ls demoCA/private

cakey.pem

A 7.3. Making A Certificate Request

To make new certificates, you should make a certificate request first.

# cd /work/openssl-0.9.7c/CA

Run following commands,

# openssl genrsa -out key.pem 1024

# openssl req -new -key key.pem -out req.pem

(It is assumed that you are using sample configuration file - “openssl.conf.sena” )

Using configuration from /usr/share/ssl/openssl.cnf

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [US]: (Enter)

State or Province Name (full name) [Minnesota]: (Enter)

Locality Name (eg, city) [Minneapolis]: (Enter)

Organization Name (eg, company) [Digi International]: (Enter)

Organizational Unit Name (eg, section) []:(Enter)

Common Name (eg, your name or your server's hostname) []:Sena VTS

Email Address []:(Enter)

Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:(Press Enter – Do not enter any other characters)

An optional company name []:(Press Enter – Do not enter any other characters)

A 7.4. Signing A Certificate Request

Step 1. Signing a certificate request

# cd /work/openssl-0.9.7c/CA

# cp req.pem newreq.pem

# sh /usr/local/ssl/misc/CA.sh –sign

1 2 ... 122 123 124 125 126 127 128 129 130 131

Keine Kommentare

Sena STS Series Betriebsanweisung Seite 127