Certificates

Overview

This document explains how to create certificates.

Install gnutls

  $ sudo apt-get install gnutls-bin

Create a CA Template

ca.tmpl

cn = Example CA
ca
cert_signing_key

Create a Host Template

example.tmpl

organization = Example
cn = example.org
tls_www_server
encryption_key
signing_key
dns_name = example.org

Generate Private Keys

  $ certtool --generate-privkey > ca-key.pem
  $ certtool --generate-privkey > key.pem

Generate Certificates

  $ certtool --generate-self-signed --load-privkey ca-key.pem --template ca.tmpl --outfile ca.pem
  $ certtool --generate-certificate --load-privkey key.pem --load-ca-certificate ca.pem --load-ca-privkey ca-key.pem --template example.tmpl --outfile cert.pem