Still pursuing my journey around ldap, ssl and certificates : lets play with OpenSSL libraries.<\/p>\n\n\n\n
Have a look at the code on github here<\/a>.<\/p>\n\n\n\n Possible actions so far:<\/p>\n\n\n\n Example to create a root ca, a certificate signing request and a certificate (which you can use in latest chrome) :<\/p>\n\n\n\n Note : have a look at this article <\/a>if you want to test your certificate in a http ssl server.<\/p>\n","protected":false},"excerpt":{"rendered":" Still pursuing my journey around ldap, ssl and certificates : lets play with OpenSSL libraries. Have a look at the code on github here. Possible actions so far: Example to create a root ca, a certificate signing request and a certificate (which you can use in latest chrome) : Note : have a look at […]<\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[132],"tags":[134,133],"class_list":["post-2407","post","type-post","status-publish","format-standard","hentry","category-openssl","tag-certificate","tag-openssl","category-132-id","post-seq-1","post-parity-odd","meta-position-corners","fix"],"_links":{"self":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts\/2407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2407"}],"version-history":[{"count":1,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts\/2407\/revisions"}],"predecessor-version":[{"id":2408,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts\/2407\/revisions\/2408"}],"wp:attachment":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2407"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}--genkey generate rsa keys public.pem and private.pem\r\n--encrypt encrypt a file using public.pem\r\n--decrypt decrypt a file using private.pem\r\n--mkcert make a self sign root cert, read from privatekey (option) & write to ca.crt and ca.key\r\n--mkreq make a certificate service request, read from request.key (if exist) & write to request.csr request.key\r\n--signreq make a certificate from a csr, read from a csr filename and a cert file\r\n--selfsign make a self sign cert, write to cert.crt cert.key\r\n--p12topem convert a pfx to pem, write to cert.crt and cert.key\r\n--pemtop12 convert a pem to pfx, read from cert.crt and cert.key<\/code><\/pre>\n\n\n\nrem if you want to reuse an existing key and therefore renew instead of recreate\r\ntinySSL.exe --mkcert --debug=true --privatekey=ca.key --password=password --filename=ca.crt\r\nrem recreate, not renew\r\nrem tinySSL.exe --mkcert --debug=true --filename=ca.crt\r\nrem renew, not recreate\r\ntinySSL.exe --mkreq --debug=true --filename=request.csr --privatekey=request.key\r\nrem recreate, not renew\r\nrem tinySSL.exe --mkreq --debug=true --filename=request.csr\r\ntinySSL.exe --signreq --debug=true --alt=\"DNS:*.groupe.fr\" --password=password --filename=request.csr --cert=ca.crt<\/code><\/pre>\n\n\n\n