Template:Generating certificates and keys: Difference between revisions
No edit summary |
|||
| Line 2: | Line 2: | ||
<ul> | <ul> | ||
<li>Now we can start generating the certificates and keys. Begin with the <b>certificate authority</b> (<b>CA</b>) - the root certificate file that will be used to sign other certificates and keys: | <li>Now we can start generating the certificates and keys. Begin with the <b>certificate authority</b> (<b>CA</b>) - the root certificate file that will be used to sign other certificates and keys:<pre>./easyrsa build-ca nopass</pre></li> | ||
<li>Next, build the <b>server</b> certificate and key:<pre>./easyrsa build-server-full server nopass</pre></li> | |||
<li>Next, build certificates and keys for the <b>clients</b>:<pre>./easyrsa build-client-full Client1 nopass</pre><font size="-1"><b>Note</b>: replace <i>Client1</i> with this client's Common Name (CN).</font><br><br></li> | |||
<li>Lastly, generate <b>Diffie Hellman parameters</b>:<pre>./easyrsa gen-dh</pre></li> | |||
<li>Next, build the <b>server</b> certificate and key: | |||
<li>Next, build certificates and keys for the <b>clients</b>: | |||
<li>Lastly, generate <b>Diffie Hellman parameters</b>: | |||
</ul> | </ul> | ||
Revision as of 11:36, 29 October 2020
Step 3: generating certificates and keys
- Now we can start generating the certificates and keys. Begin with the certificate authority (CA) - the root certificate file that will be used to sign other certificates and keys:
./easyrsa build-ca nopass
- Next, build the server certificate and key:
./easyrsa build-server-full server nopass
- Next, build certificates and keys for the clients:
./easyrsa build-client-full Client1 nopass
Note: replace Client1 with this client's Common Name (CN). - Lastly, generate Diffie Hellman parameters:
./easyrsa gen-dh