Changes for page OpenSSL

Last modified by Sebastian Marsching on 2024/01/09 22:18
From version 2.1
edited by Sebastian Marsching
on 2022/05/29 13:38
Change comment: There is no comment for this version
To version 3.1
edited by Sebastian Marsching
on 2024/01/09 22:18
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -54,6 +54,20 @@
54 54   extendedKeyUsage=clientAuth
55 55   nsCertType=client
56 56  
57 +## Using an EC key
58 +
59 +In order to generate an eliptic curve key with the `req` command, a suitable parameters file has to be generated first:
60 +
61 +```bash
62 +openssl genpkey -genparam -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -out ec-p-256-params.pem
63 +```
64 +
65 +Instead of the `P-256` curve, another curve can be chose of course. This parameter file can then be used with the `-newkey` parameter of the `req` command:
66 +
67 +```bash
68 +openssl req -out cert.csr -keyout cert.key -nodes -newkey params:ec-p-256-params.pem -sha256
69 +```
70 +
57 57  # Importing a Certificate into the Java Keystore
58 58  
59 59  See [[KeyStore|doc:Development.Java.KeyStore.WebHome]].