... | ... | @@ -13,7 +13,7 @@ browsers and operating systems, they are only suitable for testing.** |
|
|
|
|
|
## Certification Authority (CA)
|
|
|
To generate server and client certificates, you need to have CA like certificate to sign these certificates.
|
|
|
You can use pre-generated CA like certificate or generate your own. Pre-generated certificate files `ca.key`, `ca.pem` and `ca.srl` are placed in [JetConf](https://gitlab.labs.nic.cz/labs/jetconf) repository in `utils/cert_gen` subdirectory.
|
|
|
You can use pre-generated CA like certificate or generate your own. Pre-generated certificate files `ca.key` and `ca.pem` are placed in [JetConf](https://gitlab.labs.nic.cz/labs/jetconf) repository in `utils/cert_gen` subdirectory.
|
|
|
|
|
|
### Generate your own CA like certificate
|
|
|
Make or move to your working directory
|
... | ... | @@ -21,11 +21,7 @@ Make or move to your working directory |
|
|
$ mkdir my_ca_cert
|
|
|
$ cd my_ca_cert
|
|
|
```
|
|
|
Generate `ca.key`
|
|
|
```bash
|
|
|
$ openssl genrsa -out ca.key 2048
|
|
|
```
|
|
|
Create `ca.srl`
|
|
|
Generate `ca.key` [more](https://www.openssl.org/docs/manmaster/man1/genrsa.html)
|
|
|
```bash
|
|
|
$ openssl genrsa -out ca.key 2048
|
|
|
```
|
... | ... | |