To create a certificate request:
openssl req -new -days 730 -keyout keyna.pem -out keyna.pem
[ See a run through screen shot here ]
Self-sign the request - only do this if you are not sending off to a CA such as Verisign.
openssl ca -policy policy_anything -days 730 -out certna.pem -infiles keyna.pem
[ See a run through screen shot here ]
If you get 'unable to write random state', try this: look for command ssh-rand-helper usually under ssh install directories (or if ~/.ssh/.prng_seed exists - you can just link to it or copy it to $HOME).
ssh-rand-helper -b 1024 > $HOME/.prng_seed
To strip the password out, for restarts:
openssl rsa -in keyna.key -out keyna.key.unsecure
January 10th, 2008 at 10:27 pm
[…] Handed to you on a plate - clear simple and proven. Generate a self signed cert as describe in my >%20openssl+tip+here%20One gotcha is if your WLS has only an export license, which then requires a maximum of 56bits […]