zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-05-16 17:37:17 +02:00
Code Issues Projects Releases Packages Wiki Activity

Updated doc/certificates

Browse source
This commit is contained in:
Priit Tark 2015-03-30 11:10:18 +03:00
parent d5a117dfc5
commit 0e252b0b6b
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
doc/certificates.md
View file

@ -34,8 +34,8 @@ Configure OpenSSL:
Make sure the following options are in place:
[ CA_default ]
# Where everything is kept
dir = /home/registry/registry/shared/ca # around line nr 42
# Where everything is kept. NB! Use your exact location!
dir = /home/registry/registry/shared/ca...or your ca path # around line nr 42
crl_extensions = crl_ext # around line nr 71
@ -63,7 +63,7 @@ Make sure the following options are in place:
basicConstraints = CA:true # around line nr 240
keyUsage = cRLSign, keyCertSign # around line nr 245
Generate the root key and remember your password, you need it later in application.yml:
Generate the root key and REMEBER your password, you need it later in application.yml:
openssl genrsa -aes256 -out private/ca.key.pem 4096
@ -185,6 +185,8 @@ Download CRT file and create p12 file.
openssl pkcs12 -export -inkey private/api-user.key.pem -in certs/api-user.crt.pem -out pkcs/api_user.p12
openssl pkcs12 -export -inkey private/priit.key.pem -in certs/registrar1.crt.pem -out pkcs/registrar1.p12
Add api_user.p12 to your browser.