mnemo_cards/mnemo_cards_backend/create_certificate.md
2025-11-16 14:25:27 +03:00

590 B

You can use OpenSSL directly.

Create a Certificate Authority private key (this is your most important key):

openssl req -new -newkey rsa:1024 -nodes -out ca.csr -keyout ca.key Create your CA self-signed certificate:

openssl x509 -trustout -signkey ca.key -days 365 -req -in ca.csr -out ca.pem Issue a client certificate by first generating the key, then request (or use one provided by external system) then sign the certificate using private key of your CA:

openssl genrsa -out client.key 1024 openssl req -new -key client.key -out client.csr openssl ca -in client.csr -out client.cer