Categories:
Android (13)
Apple Mac (27)
DH Keys (39)
DSA Keys (69)
EC Keys (572)
Firefox (31)
General (12)
Google Chrome (25)
Intermediate CA (152)
Java VM (33)
JDK Keytool (28)
Microsoft CertUtil (29)
Microsoft Edge (9)
Mozilla CertUtil (22)
OpenSSL (237)
Other (7)
Portecle (38)
Publishers (2697)
Revoked Certificates (30)
Root CA (89)
RSA Keys (2225)
Tools (46)
Tutorial (3)
What Is (22)
Windows (129)
Collections:
Other Resources:
OpenSSL "ca" - Track CSR Signing History
How to track CSR certificate signing history? I want to know how many CSR I have signed with the OpenSSL "ca" command so far.
✍: FYIcenter.com
OpenSSL "ca" command automatically tacks your CSR signing history for you.
Each time you sign a CSR and generate a new certificate, it will:
The test below shows you how OpenSSL "ca" command manages CSR signing history:
C:\Users\fyicenter>dir /s demoCA 115 index.txt 21 index.txt.attr 0 index.txt.old <DIR> newcerts 5 serial 5 serial.old Directory of .\demoCA\newcer 3,279 1000.pem C:\Users\fyicenter>type demoCA\index.txt V 170831202401Z 1000 unknown /C=US/ST=NY/L=NY/O=FYIcenter.com /CN=www.fyicenter.com/emailAddress=joe@fyicenter.com C:\Users\fyicenter>type demoCA\serial 1001
As you can see from the test, you can count the number of lines in the .\demoCA\index.txt file to know how many CSR you have signed so far.
If the requester of the CSR want to get a copy of his/her certificate, you can lookup the serial number from the .\demoCA\index.txt file by DN fields. Then use the serial number of the file name to get the certificate in the .\demoCA\newcerts directory.
⇒ OpenSSL "ca" Error "failed to update database TXT_DB error number 2"
2016-09-13, 1428👍, 0💬
Popular Posts:
How can I specify the search location of certificate stores for Microsoft "certutil" command? The do...
Certificate Summary: Subject: Thawte Server CA Issuer: Thawte Server CA Expiration: 2021-01-01 23:59...
How to download Portecle and install it for Windows or Linux? If you want to use Portecle to generat...
Why am I getting the "Could not initialize the application's security component" error when staring ...
How to create a self-signed root certificate using "makecert.exe"? I want to issue and sign certific...