最終更新:2023-07-04 (火) 05:13:32 (300d)  

Linux/usr/lib/ssl/misc/CA.pl
Top / Linux / usr / lib / ssl / misc / CA.pl

/usr/lib/ssl/misc/CA.pl -newca

help

  • Usage:
        CA.pl -newcert | -newreq | -newreq-nodes | -xsign | -sign | -signCA | -signcert | -crl | -newca [-extra-cmd parameter]
        CA.pl -pkcs12 [certname]
        CA.pl -verify certfile ...
        CA.pl -revoke certfile [reason]

-newca

  • openssl req -new -keyout ./demoCA/private/cakey.pem -out ./demoCA/careq.pem
  • openssl ca -create_serial -out ./demoCA/cacert.pem -days 1095 -batch -keyfile ./demoCA/private/cakey.pem -selfsign -extensions v3_ca -infiles ./demoCA/careq.pem

demoCA

  • cacert.pem: CA証明書
  • careq.pem: CA証明書の作成に使ったCSR
  • certs
  • crl
  • crlnumber
  • index.txt
  • index.txt.attr
  • index.txt.old
  • newcerts
    • ~~.pem

  • private
    • cakey.pem: CA秘密鍵
  • serial