Я использую приведенную ниже команду (4-й шаг) для настройки корневого CA:
$openssl x509 -req -in verificationCert.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out verificationCert.crt -days 500 -sha256
Previous 3 steps are below:
Step 1: Generate a key pair for the private key verification certificate
openssl genrsa -out verificationCert.key 2048
Step 2: Copy this registration code
a6717bbdd91814ce5758ad913ed41d7ff6d0963e9b88779be8ddb2d6dc88748b
Step 3: Create a CSR with this registration code
openssl req -new -key verificationCert.key -out verificationCert.csr
Put the registration code in the Common Name field
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:
a6717bbdd91814ce5758ad913ed41d7ff6d0963e9b88779be8ddb2d6dc88748b
Email Address []:
Итак, я хочу знать, как мне создать rootCA.key и использую ли я правильную ссылку для загрузки rootCA. PEM.