Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Creating a RSA Certificate

There are two steps in creating a RSA certificate:

  1. First step is performed by the party that wants the certificate.
  2. Second step is performed by the Certificate Authority (CA) that creates the certificate.

Anchor
1054533
1054533
Step 1

Anchor
1054534
1054534
Step one is creating the certificate request. The certificate request will then be sent to the CA that verifies the request and creates the certificate from the request. The command that creates the certificate request also creates a private key. The private key must be secured so that only the entity identified by the certificate request has read access.

Anchor
1054535
1054535
The following Universal Certificate command creates:

  • Certificate request, which it writes it to file req.pem
  • Private key, which it writes it to file pkey.pem
Panel
ucert -create request -request_file req.pem -private_key_file pkey.pem -country US -state Maryland -locality Baltimore 
      -organization "Acme, Inc." -common_name "Joe Buck"

Anchor
1054544
1054544
Step 2

Anchor
1054545
1054545
Step two is for the CA to create a certificate from the request and sign it with the CA's private key.

Anchor
1054546
1054546
The following Universal Certificate command creates the certificate and writes it to file cert.pem.

Panel
ucert -create cert -request_file req.pem -cert_file cert.pem -private_key_file cakey.pem -ca_cert_file cacert.pem

Anchor
1079090
1079090
Components

Anchor
1079094
1079094
Universal Certificate

...