OpenSSL A.00.09.08t.001, A.00.09.08t.002, and A.00.09.08t.003 Release Notes (5900-2201, February 2012)
Creating an RSA certificate request
Following is the syntax to create a new certificate request:
# openssl req -new -nodes -out <filename> -keyout <keyfile>
-subj <subject>
Where:
<filename> specifies the file to which the certificate request is written.
<keyfile> specifies the file to which the RSA public and private key pair for the certificate
is written
<subject> specifies the subject name of the certificate.
For example: # openssl req -new -nodes -out cert.txt -keyout key.pem -subj
"/C=US/ST=CA/L=CITY/CN=localhost/emailAddress=root@localhost".
This command creates an RSA certificate request.
Creating a self-signed certificate
Following is the syntax to create a self-signed certificate:
# openssl req -new -nodes -x509 -out <filename> -keyout <keyfile>
-days <numdays> -subj <subject>
Where:
-x509 indicates a self-signed certificate.
numdays indicates the number of days for which the certificate is valid.
For example: # openssl req -new -nodes -x509 -out cert.pem -keyout key.pem
-days 365 -subj
"/C=US/ST=CA/L=City/CN=localhost/emailAddress=root@localhost".
This command creates an self-signed certificate.
OpenSSL resources
This section provides a list of sources from which you can obtain the OpenSSL software, and
pointers to obtain information about OpenSSL technology.
Getting the OpenSSL software
You can obtain OpenSSL A.00.09.08t software from the following sources:
• HP Software Depot at: http://www.software.hp.com
• HP-UX Operating Environments (OEs)
TIP: The most recent version of OpenSSL is available at: http://www.software.hp.com
Learning about OpenSSL technology
A large volume of information exists on the Internet about OpenSSL technology. HP recommends
that you learn more about OpenSSL by reading O'Reilly's book Network Security with OpenSSL:
Cryptography for Secure Communications by John Viega, Matt Messier, and Pravir Chandra. You
can order this book from http://www.oreilly.com/
You can also learn about the OpenSSL technology at the following links:
• OpenSSL Website at: http://www.openssl.org/
• OpenSSL FAQ at: http://www.openssl.org/support/faq.html
• OpenSSL mailing list at: http://marc.theaimsgroup.com/?l=openssl-users
OpenSSL resources 21