diff --git a/security/openssl_certificate_chain.adoc b/security/openssl_certificate_chain.adoc index 0040b9f..8567bdb 100644 --- a/security/openssl_certificate_chain.adoc +++ b/security/openssl_certificate_chain.adoc @@ -1,6 +1,6 @@ = OpenSSL Certificate Chain -Version: 0.0.0.6 +Version: 0.0.0.7 This documentation contains the complete set of commands to create a new OpenSSL self-signed @@ -53,3 +53,6 @@ Each key can be encrypted or unencrypted, with multiple encryption options; AES == Create Server Certificate `openssl x509 -sha256 -req -days 365 -in server-csr.pem -CA intermediate-crt.pem -CAkey intermediate-key.pem -extensions SAN -extfile <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS.1:")) -out server-crt.pem` + +== Verify Server Certificate +`openssl x509 -noout -text -in server-crt.pem`