Installation#

$ dnf install easy-rsa

Initialization#

$ cp /usr/share/easy-rsa/3.0.1/openssl-1.0.cnf .
$ /usr/share/easy-rsa/3.0.1/easyrsa init-pki

Creating CA#

$ /usr/share/easy-rsa/3.0.1/easyrsa build-ca

Generating a Certificate Request#

``$ /usr/share/easy-rsa/3.0.1/easyrsa gen-req ``

Displaying a Certificate Request#

``$ /usr/share/easy-rsa/3.0.1/easyrsa show-req ``

Issuing a Certificate#

``$ /usr/share/easy-rsa/3.0.1/easyrsa sign-req server ``

Displaying a Certificate#

``$ /usr/share/easy-rsa/3.0.1/easyrsa show-cert ``

Revoking a Certificate#

``$ /usr/share/easy-rsa/3.0.1/easyrsa revoke ``

Generating a CRL#

$ /usr/share/easy-rsa/3.0.1/easyrsa gen-crl

References#