Difference between revisions of "Generating SSL Server Certificate"

From Dogtag
Jump to: navigation, search
m (Requesting Certificate)
m
 
Line 25: Line 25:
 
* [[Generating SSL Server CSR with NSS]]
 
* [[Generating SSL Server CSR with NSS]]
 
* [[Generating SSL Server CSR with OpenSSL]]
 
* [[Generating SSL Server CSR with OpenSSL]]
 
= Requesting Certificate =
 
 
* [[Requesting SSL Server Certificate with PKI CLI]]
 
  
 
= Issuing Certificate =
 
= Issuing Certificate =
Line 34: Line 30:
 
* [[Issuing SSL Server Certificate with NSS]]
 
* [[Issuing SSL Server Certificate with NSS]]
 
* [[Issuing SSL Server Certificate with CMC]]
 
* [[Issuing SSL Server Certificate with CMC]]
 +
* [[Certificate Enrollment with PKI CLI]]
  
 
= References =
 
= References =
  
 
* [[Generating System Certificates]]
 
* [[Generating System Certificates]]

Latest revision as of 02:18, 10 August 2019

Properties

  • Subject DN: cn=server.example.com,ou=pki-tomcat,o=EXAMPLE
  • Key:
    • type: rsa
    • algorithm: SHA256withRSA
    • size: 2048
  • Basic constraints: None
  • Key usage extension (critical):
    • Digital Signature
    • Non Repudiation
    • Key Encipherment
    • Data Encipherment
  • Extended key usage extension:
    • TLS Web Server Authentication

Self-Signed Certificate

Generating CSR

Issuing Certificate

References