Appendix E. Certificates

Procedure E.1. Creating a Certificate Authority

1. Run the following command:

   #openssl req -new -x509 -keyout ca.key -out ca.crt -days 3650

   Copy to Clipboard Toggle word wrap
   This command requests a new CA pair valid for 3650 days.
2. Enter a password to protect your CA:

   Generating a 2048 bit RSA private key
   ......................................................................................................................................+++
   ..................................................................................................+++
   writing new private key to 'ca.key'
   Enter PEM pass phrase:
   Verifying - Enter PEM pass phrase:

   Copy to Clipboard Toggle word wrap
3. Enter the following details about your organization:

   Country Name (2 letter code) [XX]:AU
   State or Province Name (full name) []:Queensland
   Locality Name (eg, city) [Default City]:Brisbane
   Organization Name (eg, company) [Default Company Ltd]:Red Hat
   Organizational Unit Name (eg, section) []:Engineering Content Services
   Common Name (eg, your name or your server's hostname) []:www.example.com
   Email Address []:dmacpher@redhat.com

   Copy to Clipboard Toggle word wrap
   This information forms the Distinguished Name (DN) in your certificate.