OPENSSL The following steps will enable you to create your own certificates on a windows machine using OpenSSL command line tool. Download and install OpenSSL tool, using the link Use ‘Win64 OpenSSL v.1.0.2k’ size23 MB. Unzip it anywhere on your computer. Somewhere with read and write permission. And install it. 3. Path setting Start a command-prompt. Click Start -> Programs -> Accessories -> Command prompt Or just Start -> cmd Give the command openssl If the command is not recognized you must change the environment variables PATH (Path) and maybe CLASSPATH. Set your environment variable path to include present working directory (.) and your folder with the OpenSSL toolkit it (e.g. C:\Program Files(x86)\openssl/bin). For more details; See the Appendix on environment variables at the end of this document. You can run the windows cmd from a particular directory/folder by Right clicking in the directory/folder while keeping the Shift key down. Now choose Open Command window here. This way you can create your keys/certificate exactly where you want it. 3. Creation of certificates First create a directory for certificates Now you are ready to create your private public keys. Type the following in your command window: openssl –req –x509 –days 365 –newkey rsa:2048 –keyout my-private-key.pem –out my-cert.pem • Explain the above openssl command, the options and other params • Find five more openssl options and explain them, don’t do it • FIX the ERROR; If you encounter an ERROR: unable to write random state Now execute the following command openssl pkcs12 –export –in my-cert.pem –inkey my-private-key.pem –out my-keys-container.pfx • Explain the above openssl command, the options and other params Finally Run the following command and explain, in detail, what does it do? openssl pkcs12 -in my-keys-container.pfx -clcerts -nokeys -out my-public-cert-key.pem
OPENSSL The following steps will enable you to create your own certificates on a windows machine using OpenSSL command line tool. Download and install OpenSSL tool, using the link Use ‘Win64 OpenSSL v.1.0.2k’ size23 MB. Unzip it anywhere on your computer. Somewhere with read and write permission. And install it. 3. Path setting Start a command-prompt. Click Start -> Programs -> Accessories -> Command prompt Or just Start -> cmd Give the command openssl If the command is not recognized you must change the environment variables PATH (Path) and maybe CLASSPATH. Set your environment variable path to include present working directory (.) and your folder with the OpenSSL toolkit it (e.g. C:\Program Files(x86)\openssl/bin). For more details; See the Appendix on environment variables at the end of this document. You can run the windows cmd from a particular directory/folder by Right clicking in the directory/folder while keeping the Shift key down. Now choose Open Command window here. This way you can create your keys/certificate exactly where you want it. 3. Creation of certificates First create a directory for certificates Now you are ready to create your private public keys. Type the following in your command window: openssl –req –x509 –days 365 –newkey rsa:2048 –keyout my-private-key.pem –out my-cert.pem • Explain the above openssl command, the options and other params • Find five more openssl options and explain them, don’t do it • FIX the ERROR; If you encounter an ERROR: unable to write random state Now execute the following command openssl pkcs12 –export –in my-cert.pem –inkey my-private-key.pem –out my-keys-container.pfx • Explain the above openssl command, the options and other params Finally Run the following command and explain, in detail, what does it do? openssl pkcs12 -in my-keys-container.pfx -clcerts -nokeys -out my-public-cert-key.pem