Also verify server certificate.

This commit is contained in:
inference 2023-05-30 00:40:31 +01:00
parent 9f8a13c387
commit adae788a94
Signed by: inference
SSH Key Fingerprint: SHA256:9Pl0nZ2UJacgm+IeEtLSZ4FOESgP1eKCtRflfPfdX9M

View File

@ -1,6 +1,6 @@
= OpenSSL Certificate Chain = OpenSSL Certificate Chain
Version: 0.0.0.6 Version: 0.0.0.7
This documentation contains the complete set of commands to create a new OpenSSL self-signed This documentation contains the complete set of commands to create a new OpenSSL self-signed
@ -53,3 +53,6 @@ Each key can be encrypted or unencrypted, with multiple encryption options; AES
== Create Server Certificate == Create Server Certificate
`openssl x509 -sha256 -req -days 365 -in server-csr.pem -CA intermediate-crt.pem -CAkey intermediate-key.pem -extensions SAN -extfile <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS.1:")) -out server-crt.pem` `openssl x509 -sha256 -req -days 365 -in server-csr.pem -CA intermediate-crt.pem -CAkey intermediate-key.pem -extensions SAN -extfile <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS.1:")) -out server-crt.pem`
== Verify Server Certificate
`openssl x509 -noout -text -in server-crt.pem`