最終更新:2023-07-04 (火) 05:13:32 (305d)
Linux/usr/lib/ssl/misc/CA.pl
/usr/lib/ssl/misc/CA.pl -newca
help
Usage: CA.pl -newcert | -newreq | -newreq-nodes | -xsign | -sign | -signCA | -signcert | -crl | -newca [-extra-cmd parameter] CA.pl -pkcs12 [certname] CA.pl -verify certfile ... CA.pl -revoke certfile [reason]
-newca
- openssl req -new -keyout ./demoCA/private/cakey.pem -out ./demoCA/careq.pem
- openssl ca -create_serial -out ./demoCA/cacert.pem -days 1095 -batch -keyfile ./demoCA/private/cakey.pem -selfsign -extensions v3_ca -infiles ./demoCA/careq.pem
demoCA
- cacert.pem: CA証明書
- careq.pem: CA証明書の作成に使ったCSR
- certs
- crl
- crlnumber
- index.txt
- index.txt.attr
- index.txt.old
- newcerts
~~.pem
- private
- cakey.pem: CA秘密鍵
- serial