Difference between revisions of "Generating SSL Server Certificate"

From Dogtag
Jump to: navigation, search
m (Generating CSR)
m (Requesting Certificate)
(One intermediate revision by the same user not shown)
Line 25: Line 25:
 
* [[Generating SSL Server CSR with NSS]]
 
* [[Generating SSL Server CSR with NSS]]
 
* [[Generating SSL Server CSR with OpenSSL]]
 
* [[Generating SSL Server CSR with OpenSSL]]
* [[Generating SSL Server CSR with PKI CA]]
+
 
 +
= Requesting Certificate =
 +
 
 +
* [[Requesting SSL Server Certificate with PKI CLI]]
  
 
= Issuing Certificate =
 
= Issuing Certificate =

Revision as of 02:06, 10 August 2019

Properties

  • Subject DN: cn=server.example.com,ou=pki-tomcat,o=EXAMPLE
  • Key:
    • type: rsa
    • algorithm: SHA256withRSA
    • size: 2048
  • Basic constraints: None
  • Key usage extension (critical):
    • Digital Signature
    • Non Repudiation
    • Key Encipherment
    • Data Encipherment
  • Extended key usage extension:
    • TLS Web Server Authentication

Self-Signed Certificate

Generating CSR

Requesting Certificate

Issuing Certificate

References