Eureka OL-8880-01

2-21

WLSE Express AAA Server Certificate Configuration Guide

OL-8880-01

Chapter2 Generating Certificates Certificate Generation with Windows CA

Figure2-21 Certificates to Export

The rest of the procedure is the same as for server and client certificates except that usually the private

key of CA certificates are not exported. In that case, the enabled exported certificate file format options

will be a little different. Instead of just PKCS#12, the two formats will be DER or Base-64 encoded DER

as shown in Figure2-2 2.

Figure2-22 Export File Formats

Contents

Main CHAPT ER Generating Certificates Overview RSA Key Generation Certificate Request Creation Certificate Generation Generating Certificates with OpenSSL The openssl.cnf Configuration File 2-3 export OPENSSL_CONF /opts/open/openssl.cnf Specifying the config option on the command line Figure2-1 Example openssl.cnf File Required Certificate Extensions Creating Test Certificates and Keys Creating a CA Directory Creating a Self-signed CA Root Certificate and RSA Key Converting a CA Certificate to PKCS#12 Creating a Server Certificate Request and RSA Key Creating a Server Certificate from the Request Creating a Client Certificate Request Creating a Client Certificate from the Request Certificate Generation with Windows CA Generating a Server Certificate Page Page Page Generating a Client Certificate Page Certificate Retrieval Page Page Exporting Server and Client Certificates Page Page Page Exporting CA Certificates Page Converting PKCS#12 to PEM 2-23