cdpmacdeMBP:mkssl3 cdpmac$  openssl req -new -x509 -keyout ca.key -out ca.crt -config openssl.cnf

Generating a  bit RSA private key

.++++++

......................++++++

writing new private key to 'ca.key'

Enter PEM pass phrase:

Verifying - Enter PEM pass phrase:

-----

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name ( letter code) [AU]:CN

State or Province Name (full name) [Some-State]:Beijing

Locality Name (eg, city) []:Dongcheng

Organization Name (eg, company) [Internet Widgits Pty Ltd]:Go

Organizational Unit Name (eg, section) []:Audit

Common Name (e.g. server FQDN or YOUR name) []:CA

Email Address []:    

cdpmacdeMBP:mkssl3 cdpmac$ openssl req -new -key server.key -out server.csr -config openssl.cnf

Enter pass phrase for server.key:

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name ( letter code) [AU]:CN

State or Province Name (full name) [Some-State]:Beijing

Locality Name (eg, city) []:Dongcheng

Organization Name (eg, company) [Internet Widgits Pty Ltd]:Go

Organizational Unit Name (eg, section) []:Audit

Common Name (e.g. server FQDN or YOUR name) []www.httpsserver.com                                                                                                                  ^ Email Address []:                                                                  

Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

cdpmacdeMBP:mkssl3 cdpmac$ openssl req -new -key client.key -out client.csr -config openssl.cnf

Enter pass phrase for client.key:

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name ( letter code) [AU]:CN

State or Province Name (full name) [Some-State]:Beijing

Locality Name (eg, city) []:Dongcheng

Organization Name (eg, company) [Internet Widgits Pty Ltd]:Go

Organizational Unit Name (eg, section) []:Audit

Common Name (e.g. server FQDN or YOUR name) []:www.httpsclient.com

Email Address []:

Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

cdpmacdeMBP:mkssl3 cdpmac$ Openssl ca -in server.csr -out server.crt -cert ca.crt -keyfile ca.key -config openssl.cnf

Using configuration from openssl.cnf

Enter pass phrase for ca.key:

Check that the request matches the signature

Signature ok

Certificate Details:

        Serial Number:  (0x1)

        Validity

            Not Before: Jul   ::  GMT

            Not After : Jul   ::  GMT

        Subject:

            countryName               = CN

            stateOrProvinceName       = Beijing

            organizationName          = Go

            organizationalUnitName    = Audit

            commonName                = www.httpsserver.com

        X509v3 extensions:

            X509v3 Basic Constraints:

                CA:FALSE

            Netscape Comment:

                OpenSSL Generated Certificate

            X509v3 Subject Key Identifier:

                7F:::A8:3F::B8::2F:0D:B4::F2::5F:E5:1E::5E:

            X509v3 Authority Key Identifier:

                keyid:B6:D8::A3:C2::D1::8F:::C4::FA::C4:C4:1A:DA:

Certificate is to be certified until Jul   ::  GMT ( days)

Sign the certificate? [y/n]:y

 out of  certificate requests certified, commit? [y/n]y

Write out database with  new entries

Data Base Updated

cdpmacdeMBP:mkssl3 cdpmac$ Openssl ca -in client.csr -out client.crt -cert ca.crt -keyfile ca.key -config openssl.cnf

Using configuration from openssl.cnf

Enter pass phrase for ca.key:

:error::lib():UI_set_result:result too small:/SourceCache/OpenSSL098/OpenSSL098-52.20./src/crypto/ui/ui_lib.c::You must type in  to  characters

Enter pass phrase for ca.key:

:error::lib():UI_set_result:result too small:/SourceCache/OpenSSL098/OpenSSL098-52.20./src/crypto/ui/ui_lib.c::You must type in  to  characters

Enter pass phrase for ca.key:

Enter pass phrase for ca.key:

Enter pass phrase for ca.key:

Check that the request matches the signature

Signature ok

Certificate Details:

        Serial Number:  (0x2)

        Validity

            Not Before: Jul   ::  GMT

            Not After : Jul   ::  GMT

        Subject:

            countryName               = CN

            stateOrProvinceName       = Beijing

            organizationName          = Go

            organizationalUnitName    = Audit

            commonName                = www.httpsclient.com

        X509v3 extensions:

            X509v3 Basic Constraints:

                CA:FALSE

            Netscape Comment:

                OpenSSL Generated Certificate

            X509v3 Subject Key Identifier:

                F3:B9:6E:AB:::FE:0D:E2::3D:3B:DD:7C:CC:::7B::7F

            X509v3 Authority Key Identifier:

                keyid:B6:D8::A3:C2::D1::8F:::C4::FA::C4:C4:1A:DA:

Certificate is to be certified until Jul   ::  GMT ( days)

Sign the certificate? [y/n]:y

 out of  certificate requests certified, commit? [y/n]y

Write out database with  new entries

Data Base Updated