1 | openssl genrsa -out relay.key 2048 |
2 | openssl req -new -key relay.key -out relay.csr |
3 | openssl x509 -req -in relay.csr -signkey relay.key -out relay.crt -days 3650 -sha256 -extfile v3.ext |
4 |
san.cnf
· 433 B · Text
Raw
[ req ]
default_bits = 2048
distinguished_name = req_distinguished_name
req_extensions = req_ext
prompt = no
[ req_distinguished_name ]
countryName = de
stateOrProvinceName = hessen
localityName = frankfurt
organizationName = none
commonName = cosmic.voyage
[ req_ext ]
subjectAltName = @alt_names
[alt_names]
DNS.1 = cosmic.voyage
DNS.2 = cosmic.voyage1
1 | [ req ] |
2 | default_bits = 2048 |
3 | distinguished_name = req_distinguished_name |
4 | req_extensions = req_ext |
5 | prompt = no |
6 | [ req_distinguished_name ] |
7 | countryName = de |
8 | stateOrProvinceName = hessen |
9 | localityName = frankfurt |
10 | organizationName = none |
11 | commonName = cosmic.voyage |
12 | [ req_ext ] |
13 | subjectAltName = @alt_names |
14 | [alt_names] |
15 | DNS.1 = cosmic.voyage |
16 | DNS.2 = cosmic.voyage1 |
17 |
v3.ext
· 315 B · Text
Raw
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:TRUE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
subjectAltName = DNS:cosmic.voyage
issuerAltName = issuer:copy
1 | subjectKeyIdentifier = hash |
2 | authorityKeyIdentifier = keyid:always,issuer:always |
3 | basicConstraints = CA:TRUE |
4 | keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign |
5 | subjectAltName = DNS:cosmic.voyage |
6 | issuerAltName = issuer:copy |
7 |