Openssl Operations

From NovaOrdis Knowledge Base
Jump to navigation Jump to search

External

Internal

Generate a Self-Signed Certificate

TODO: https://home.feodorov.com:9443/wiki/Wiki.jsp?page=GenerationOfASelfSignedCertificateWithOpenssl

Generate a Public/Private Key Pair

This is the procedure to generate a public/private key pair. The keys can be further used by ssh or to generate digitally signed certificates.

Obtain a Server Certificate

openssl s_client -connect nexus-cicd.apps.openshift.novaordis.io:443

The response includes the server's certificate:

[...]
Certificate chain
 0 s:/CN=*.apps.openshift.novaordis.io
[...]
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDRTCCAi2gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtvcGVu
[...]
65vqsz8NTtde1vJ5qW31Af0pO9YehiSRfA==
-----END CERTIFICATE-----
subject=/CN=*.apps.openshift.novaordis.io
[...]