First of all, you have to CD to the bin directory of OpenSSL. The command line is quite simple. In this example I will create a 2048-bit RSA key encrypted with DES3 and then I'll create a self-signed certificate.
First of all, let's create a key: openssl genrsa -des3 -out rsa.key 2048 Then, let's create a self-signed certificate: openssl req -new -x509 -key rsa.key -days 365 -set_serial 01 -out certificate.pem Now you have rsa.key (the private key) and your PEM-encoded certificate (certificate.pem) If you want to create a CA-signed certificate, first of all you have to create CA's self-signed certificate (follow the self-signed method above) Assuming that you already created ca credentials => ca.key (CA's private key) and ca.crt (CA's certificate) Create a private key as above: openssl genrsa -des3 -out rsa.key 2048 Then generate a certificate request: openssl req -new -key rsa.key -days 365 -set_serial 01 -out certificate_req.pem Finally, use the CA to sign the certificate request: openssl x509 -out certificate.pem -CA ca.crt -CAkey ca.key -set_serial 01 -req -days 365 -in certificate_req.pem FEDERICO BERTON AREA SVILUPPO Via Europa, 20 35015 Galliera Veneta (PD) TEL. 049.9988200 FAX 049.9471337 http://www.trivenet.it ------------------------------------------------------------------------------------------ Da: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] Per conto di Ana Paula Inviato: giovedì 29 luglio 2010 11.57 A: openssl-users@openssl.org Oggetto: Command line Hi I need to create certificate and rsa keys and I've downloaded openssl-0.9.8o and openssl-1.0.0a. I can´t run 'install.com' because I've this error 'The NTVDM CPU has encountered an illegal instruction '. I don't know how to acess to OpenSSL command line to create certs and keys. Is this application (Install.com)? Can you help me? Best Regards Ana Paula Santos Alexandre Castro Unipessoal, Lda. Rua Delfim Ferreira, 169 - Hab 13 Arcozelo 4410-436 Vila Nova de Gaia Telf/Fax : 224 053 512 Telm : 932749918 email : apsan...@onentersoft.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
