Skip to Content

Changes for page OpenSSL

Last modified by Sebastian Marsching on 2024/08/17 16:53
From version 3.1
edited by Sebastian Marsching
on 2024/01/09 22:18
Change comment: There is no comment for this version
To version 1.1
edited by Sebastian Marsching
on 2022/04/03 22:18
Change comment: There is no comment for this version

Summary

Details

Page properties
Tags
... ... @@ -1,1 +1,0 @@
1 -Network
Content
... ... @@ -7,7 +7,7 @@
7 7  First we create an RSA key and certificate request for the CA:
8 8  
9 9  ```bash
10 -openssl req -out ca.csr -keyout ca.key -newkey rsa:2048
10 +openssl req -out ca.csr -keyout ca.key -newkey rsa:2048
11 11  ```
12 12  
13 13  In the next step, we self-sign this certificate request in order to create the CA certificate:
... ... @@ -54,23 +54,9 @@
54 54   extendedKeyUsage=clientAuth
55 55   nsCertType=client
56 56  
57 -## Using an EC key
58 -
59 -In order to generate an eliptic curve key with the `req` command, a suitable parameters file has to be generated first:
60 -
61 -```bash
62 -openssl genpkey -genparam -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -out ec-p-256-params.pem
63 -```
64 -
65 -Instead of the `P-256` curve, another curve can be chose of course. This parameter file can then be used with the `-newkey` parameter of the `req` command:
66 -
67 -```bash
68 -openssl req -out cert.csr -keyout cert.key -nodes -newkey params:ec-p-256-params.pem -sha256
69 -```
70 -
71 71  # Importing a Certificate into the Java Keystore
72 72  
73 -See [[KeyStore|doc:Development.Java.KeyStore.WebHome]].
59 +See [Programming/Java/Keystore](https://sebastian.marsching.com/wiki/Programming/Java/Keystore).
74 74  
75 75  ### Creating a PKCS#12 file
76 76