Categories:
Android (13)
Apple Mac (27)
DH Keys (39)
DSA Keys (71)
EC Keys (1853)
Firefox (30)
General (10)
Google Chrome (25)
Intermediate CA (152)
Java VM (29)
JDK Keytool (28)
Microsoft CertUtil (29)
Microsoft Edge (9)
Mozilla CertUtil (21)
OpenSSL (236)
Other (7)
Portecle (38)
Publishers (5376)
Revoked Certificates (16)
Root CA (85)
RSA Keys (4390)
Tools (46)
Tutorial (1)
What Is (22)
Windows (127)
Collections:
Other Resources:
OpenSSL [ca] Section in Configuration File
How to provide OpenSSL "ca" command options in the configuration file? I see examples of using the [ca] section.
✍: FYIcenter.com
Yes, you can use the [ca] section to help providing OpenSSL "ca" command options
in the configuration file. But there are 4 ways to provide "ca" command options:
1. Using unnamed section - You can put all "ca" command options in the unnamed section of the configuration file. You need to set "default_ca=empty" and keep [empty] empty. For example:
# Unnamed section of generic options ... # "ca" command options default_ca = empty default_md = md5 serial = ./my_ca/certs.seq new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db ... # empty section [empty]
2. Using named default section - You can put all "ca" command options in a named section, like "[my_ca_default]", in the configuration file. Then you can set "default_ca=my_ca_default" in the unnamed section. For example:
# Unnamed section of generic options ... default_ca = my_ca_default # default section for "ca" command options [my_ca_default] default_md = md5 serial = ./my_ca/certs.seq new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db ...
3. Using named default section and [ca] section - You can put all "ca" command options in a named section, like "[my_ca_default]", in the configuration file. Then you can set "default_ca=my_ca_default" in the [ca] section. For example:
# Unnamed section of generic options ... # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] default_md = md5 serial = ./my_ca/certs.seq new_certs_dir = ./my_ca/certs database = ./my_ca/certs.db ...
4. Using named section used by the command line - You can put all "ca" command options in a named section, like "[my_ca_internal]", in the configuration file. Then you use "ca -name=my_ca_internal" command line to access them. For example:
# Unnamed section of generic options ... # section for the "default_ca" option [ca] default_ca = my_ca_default # default section for "ca" command options [my_ca_default] # section for "ca" command options for internal certificates [my_ca_internal] default_md = md5 serial = ./my_ca_internal/certs.seq new_certs_dir = ./my_ca_internal/certs database = ./my_ca_internal/certs.db ...
⇒ OpenSSL "ca" Error "lookup failed for ca::default_ca"
2016-09-09, 2319👍, 0💬
Popular Posts:
How to verify an HTTPS server certificate? To help you to verify an HTTPS server certificate and vie...
Certificate Summary: Subject: Actalis Authentication Root CA Issuer: Actalis Authentication Root CA ...
How to export a certificate from a cert8.db file to a certificate file in DER binary format? If you ...
How can I use Microsoft "certutil -store" command? What are command options supported by "certutil -...
What is PKI (Public-Key Infrastructure)? Public-Key Infrastructure (PKI) is a public-key cryptograph...