Vertrauenswürdige SSL Zertifikate selbst erstellen – eine einfache Schritt für Schritt Anleitung
root@rpi-iot-jsho-pi-hole:~# mkdir certs root@rpi-iot-jsho-pi-hole:~# cd certs
root@rpi-iot-jsho-pi-hole:~/certs# openssl genrsa -des3 -out myCA.key 2048 Generating RSA private key, 2048 bit long modulus (2 primes) ……………………………………………….+++++ ………………………..+++++ e is 65537 (0x010001) Enter pass phrase for myCA.key: Verifying – Enter pass phrase for myCA.key: <password> root@rpi-iot-jsho-pi-hole:~/certs#
root@rpi-iot-jsho-pi-hole:~/certs# ls -la insgesamt 16 drwxr-xr-x 2 root root 4096 Nov 25 13:18 . drwx—— 6 root root 4096 Nov 25 13:08 .. -rw——- 1 root root 1743 Nov 25 13:12 myCA.key root@rpi-iot-jsho-pi-hole:~/certs#
root@rpi-iot-jsho-pi-hole:~/certs# openssl req -x509 -new -nodes -key myCA.key -sha256 -days 3650 -out myCA.pem Enter pass phrase for myCA.key: <password> You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter ‚.‘, the field will be left blank. —– Country Name (2 letter code) [AU]:DE State or Province Name (full name) [Some-State]:Bavarian Locality Name (eg, city) []:St.Wolfgang Organization Name (eg, company) [Internet Widgits Pty Ltd]:JSHO Organizational Unit Name (eg, section) []: Common Name (e.g. server FQDN or YOUR name) []:JSHO Email Address []:josef.schuster@dpsolution.de root@rpi-iot-jsho-pi-hole:~/certs#
root@rpi-iot-jsho-pi-hole:~/certs# ls -la insgesamt 16 drwxr-xr-x 2 root root 4096 Nov 25 13:18 . drwx—— 6 root root 4096 Nov 25 13:08 .. -rw——- 1 root root 1743 Nov 25 13:12 myCA.key -rw-r–r– 1 root root 1411 Nov 25 13:18 myCA.pem root@rpi-iot-jsho-pi-hole:~/certs#
This entry was posted on Freitag, November 25th, 2022 at 12:35 and is filed under Administration. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.