Openssl Operations: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
No edit summary
Line 11: Line 11:
=Generate a Public/Private Key Pair=
=Generate a Public/Private Key Pair=


This is the procedure to generate a [[Public_Key_Security#Key_Pair|public/private key pair]]. The keys can be further used by ssh or to generate [[Public_Key_Security#Certificate|digitally signed certificates]].
This is the procedure to generate a [[Public_Key_Security#Key_Pair|public/private key pair]]. The keys can be further used to generate [[Public_Key_Security#Certificate|digitally signed certificates]], or even to configure ssh, though ssh has [[Ssh_Configure_Public/Private_Key_Authentication#Create_the_OpenSSH_Private.2FPublic_Key_Pair|its own procedure to generate key pairs]].


=Obtain a Server Certificate=
=Obtain a Server Certificate=

Revision as of 01:40, 8 April 2018

External

Internal

Generate a Self-Signed Certificate

TODO: https://home.feodorov.com:9443/wiki/Wiki.jsp?page=GenerationOfASelfSignedCertificateWithOpenssl

Generate a Public/Private Key Pair

This is the procedure to generate a public/private key pair. The keys can be further used to generate digitally signed certificates, or even to configure ssh, though ssh has its own procedure to generate key pairs.

Obtain a Server Certificate

openssl s_client -connect nexus-cicd.apps.openshift.novaordis.io:443

The response includes the server's certificate:

[...]
Certificate chain
 0 s:/CN=*.apps.openshift.novaordis.io
[...]
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDRTCCAi2gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtvcGVu
[...]
65vqsz8NTtde1vJ5qW31Af0pO9YehiSRfA==
-----END CERTIFICATE-----
subject=/CN=*.apps.openshift.novaordis.io
[...]