Before you generate CA or CA-signed certificates, complete the following prerequisites:
Download and install the OpenSSL toolkit. Add the directory to the PATH environment variable.
Create a directory where you want to generate the keys and certificates. Change directories to that location.
Create a configuration file called
openssl.cnf
and depending on the OS, configure it as shown in the topics "OpenSSL Configuration File for UNIX" or "OpenSSL Configuration File for Microsoft Windows." Set the variable OPENSSL_CONF with the following command:
On UNIX:
export OPENSSL_CONF=<full path of openssl.cnf_file>
On Microsoft Windows:
Set OPENSSL_CONF=< full path of openssl.cnf_file >
Create a directory structure as shown in the following example:
Use the chmod command to give full permissions to these files.
Inside the INFA_sampleSigningCA1 directory, create the files below:
ca.db.serial
,
ca.db.index
,
ca.db.rand
Reference the "OpenSSL Configuration File for UNIX" or "OpenSSL Configuration File for Microsoft Windows" topics to configure the contents of these files.
In the
ca.db.serial
file, input value 01, save, and close the file.
Use the chmod command to give full permissions to these files.