demo/ssl/ssl.txt

   1 # In demo all key and stores passwords are 'changeit'
   2
   3 # Create CA
   4 openssl genrsa -des3 -out ca.key 4096
   5 openssl req -new -x509 -days 365 -key ca.key -out ca.crt
   6
   7 # Tomcat Server
   8 keytool -genkey -alias tomcat -keyalg RSA -keysize 4096 -keystore server.ks
   9 keytool -certreq -alias tomcat -keystore server.ks -file tomcat.csr
  10 openssl x509 -req -set_serial 02 -days 3650 -in tomcat.csr -CA ca.crt -CAkey ca.key -out tomcat.crt
  11 keytool -import -keystore server.ts -file ca.crt -alias ArgeoDemoCA
  12
  13 # Root User
  14 #keytool -genkey -alias root@demo -keyalg RSA -keysize 4096 -keystore root@demo.ks
  15 #keytool -certreq -alias root@demo -keystore root@demo.ks -file root@demo.csr
  16
  17 openssl genrsa -des3 -out root@demo.key 4096
  18 openssl req -new -key root@demo.key -out root@demo.csr
  19 openssl x509 -req -set_serial 03 -days 3650 -in root@demo.csr -CA ca.crt -CAkey ca.key -out root@demo.crt
  20
  21 openssl pkcs12 -export -out root@demo.p12 -inkey root@demo.key -in root@demo.crt -certfile ca.crt