Created
March 1, 2019 17:16
-
-
Save superseb/788a234647324b49ee5a56e07e3a91ac to your computer and use it in GitHub Desktop.
Generate openssl pss certificate
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Generate RSASSA-PSS private key for CA | |
| # The key size is 2048; the exponent is 65537 | |
| openssl genpkey -algorithm rsa-pss -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -out CA.priKey | |
| # Generate self-signed RSASSA-PSS CA | |
| openssl req -x509 -new -key CA.priKey -subj "/CN=CA" -sha256 -out CA.cer | |
| # Generate RSASSA-PSS private key for EE | |
| #openssl genpkey -algorithm rsa -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -out EE.priKey | |
| openssl genpkey -algorithm rsa-pss -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -out EE.priKey | |
| # Generate certificate signing request for RSASSA-PSS EE | |
| openssl req -new -key EE.priKey -subj "/CN=rancher.my.org" -sha256 -out EE.csr | |
| # Generate RSASSA-PSS EE based on the above CSR, and sign it with the above RSASSA-PSS CA | |
| openssl x509 -req -CAcreateserial -in EE.csr -sha256 -CA CA.cer -CAkey CA.priKey -out EE.cer |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Your problem is not similar. It is simple: 😉