Toolpack:Certificates - Revision history

Joshua Puckett: /* Create a CSR (certificate signing request) from a private key */

2023-08-22T07:38:08Z

Create a CSR (certificate signing request) from a private key

← Older revision		Revision as of 03:38, 22 August 2023
Line 51:		Line 51:

	=== Create a CSR (certificate signing request) from a private key ===		=== Create a CSR (certificate signing request) from a private key ===
	openssl req -key ~~MY_PRIVATE_KEY.pem -new~~ -out MY_CSR.csr		openssl req -new -newkey rsa:2048 -nodes -keyout my_local_cert.key -out MY_CSR.csr
	You will be prompted to answer questions regarding the certificate:		You will be prompted to answer questions regarding the certificate:
	You are about to be asked to enter information that will be incorporated		You are about to be asked to enter information that will be incorporated

Luc Morissette: Updated des3 (not secure) to aes256

2020-02-11T02:30:07Z

Updated des3 (not secure) to aes256

← Older revision		Revision as of 22:30, 10 February 2020
Line 9:		Line 9:

	=== Create new private key ===		=== Create new private key ===
	openssl genrsa -~~des3~~ -out MY_PRIVATE_KEY.pem 2048		openssl genrsa -aes256 -out MY_PRIVATE_KEY.pem 2048

	You will be prompted to enter a pass phrase:		You will be prompted to enter a pass phrase:

Luc Morissette: Updated MY_PRIVATE_KEY.key to MY_PRIVATE_KEY.pem

2019-11-27T15:31:53Z

Updated MY_PRIVATE_KEY.key to MY_PRIVATE_KEY.pem

Luc Morissette: Revised for FreeSBC vs ProSBC

2019-11-27T15:12:51Z

Revised for FreeSBC vs ProSBC

Allyntree: changed passphrase to pass phrase to match openssl

2019-03-15T14:39:37Z

changed passphrase to pass phrase to match openssl

← Older revision		Revision as of 10:39, 15 March 2019
Line 11:		Line 11:
	openssl genrsa -des3 -out MY_PRIVATE_KEY.pem 2048		openssl genrsa -des3 -out MY_PRIVATE_KEY.pem 2048

	You will be prompted to enter a ~~passphrase~~:		You will be prompted to enter a pass phrase:
	Generating RSA private key, 2048 bit long modulus		Generating RSA private key, 2048 bit long modulus
	.....................+++		.....................+++

Allyntree: /* View a certificate signing request (CSR) */

2019-03-15T13:54:16Z

View a certificate signing request (CSR)

← Older revision		Revision as of 09:54, 15 March 2019
Line 139:		Line 139:
	e6:01:6b:10		e6:01:6b:10

	=== View a certificate ~~signing request~~ (CSR) ===		=== View the signing request of a certificate (CSR) ===
	openssl req -text -noout -verify -in MY_CSR.csr		openssl req -text -noout -verify -in MY_CSR.csr

Line 190:		Line 190:
	35:9d:b9:fb:aa:60:e2:48:8f:9b:6b:fb:69:2f:a5:7c:94:5a:		35:9d:b9:fb:aa:60:e2:48:8f:9b:6b:fb:69:2f:a5:7c:94:5a:
	70:4d:a6:d1		70:4d:a6:d1

	=== Check that a certificate and a CSR match the private key ===		=== Check that a certificate and a CSR match the private key ===
	openssl x509 -noout -modulus -in MY_CERTIFICATE.crt \| openssl md5		openssl x509 -noout -modulus -in MY_CERTIFICATE.crt \| openssl md5

Allyntree: Minor edit

2019-03-15T13:53:08Z

Minor edit

← Older revision		Revision as of 09:53, 15 March 2019
Line 76:		Line 76:
	-rw-r--r-- 1 root root 1127 Mar 14 09:20 MY_CSR.csr		-rw-r--r-- 1 root root 1127 Mar 14 09:20 MY_CSR.csr

	=== View a certificate ~~contents~~ ===		=== View the contents of the certificate ===
	openssl x509 -noout -text -in MY_CERTIFICATE.crt		openssl x509 -noout -text -in MY_CERTIFICATE.crt

Line 138:		Line 138:
	3d:a6:2e:1b:eb:d7:b9:f1:a2:ad:7a:42:37:81:63:02:ac:3b:		3d:a6:2e:1b:eb:d7:b9:f1:a2:ad:7a:42:37:81:63:02:ac:3b:
	e6:01:6b:10		e6:01:6b:10


	=== View a certificate signing request (CSR) ===		=== View a certificate signing request (CSR) ===

Allyntree: /* Create a CSR (certificate signing request) from a private key */

2019-03-15T13:52:27Z

Create a CSR (certificate signing request) from a private key

← Older revision		Revision as of 09:52, 15 March 2019
Line 52:		Line 52:
	=== Create a CSR (certificate signing request) from a private key ===		=== Create a CSR (certificate signing request) from a private key ===
	openssl req -key MY_PRIVATE_KEY.key -new -out MY_CSR.csr		openssl req -key MY_PRIVATE_KEY.key -new -out MY_CSR.csr
	You will be prompted ~~for some~~ questions ~~for~~ certificate ~~contents~~:		You will be prompted to answer questions regarding the certificate:
	You are about to be asked to enter information that will be incorporated		You are about to be asked to enter information that will be incorporated
	into your certificate request.		into your certificate request.

Allyntree: Minor edit

2019-03-15T13:51:39Z

Minor edit

← Older revision		Revision as of 09:51, 15 March 2019
Line 25:		Line 25:
	openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout MY_PRIVATE_KEY.key -out MY_CERTIFICATE.crt		openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout MY_PRIVATE_KEY.key -out MY_CERTIFICATE.crt

	You will be prompted ~~for some~~ questions ~~for~~ certificate ~~contents~~:		You will be prompted to answer questions regarding the certificate:
	Generating a 2048 bit RSA private key		Generating a 2048 bit RSA private key
	.........................................................+++		.........................................................+++
Line 50:		Line 50:
	-rw-r--r-- 1 root root 1751 Mar 14 09:14 MY_PRIVATE_KEY.pem		-rw-r--r-- 1 root root 1751 Mar 14 09:14 MY_PRIVATE_KEY.pem


	=== Create a CSR (certificate signing request) from a private key ===		=== Create a CSR (certificate signing request) from a private key ===
	openssl req -key MY_PRIVATE_KEY.key -new -out MY_CSR.csr		openssl req -key MY_PRIVATE_KEY.key -new -out MY_CSR.csr

Allyntree: /* Installing a custom private key and local certificate on FreeSBC */

2019-03-15T13:49:45Z

Installing a custom private key and local certificate on FreeSBC

← Older revision		Revision as of 09:49, 15 March 2019
Line 3:		Line 3:
	== Installing a custom private key and local certificate on FreeSBC ==		== Installing a custom private key and local certificate on FreeSBC ==

	[[Create_A_SIP_Certificate_A#Upload_local_certificates_.28optional.29\|See documentation ~~here~~]]		[[Create_A_SIP_Certificate_A#Upload_local_certificates_.28optional.29\|See WEB Portal configuration documentation]]


	== Use FreeSBC (or Linux) shell to manipulate certificates ==		== Use FreeSBC (or Linux) shell to manipulate certificates ==

← Older revision		Revision as of 11:31, 27 November 2019
Line 20:		Line 20:

	Resulting file:		Resulting file:
	-rw-r--r-- 1 root root 1704 Mar 14 09:15 MY_PRIVATE_KEY.~~key~~		-rw-r--r-- 1 root root 1704 Mar 14 09:15 MY_PRIVATE_KEY.pem

	=== Create a self-signed certificate from a private key ===		=== Create a self-signed certificate from a private key ===
	openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout MY_PRIVATE_KEY.~~key~~ -out MY_CERTIFICATE.crt		openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout MY_PRIVATE_KEY.pem -out MY_CERTIFICATE.crt

	You will be prompted to answer questions regarding the certificate:		You will be prompted to answer questions regarding the certificate:
Line 29:		Line 29:
	.........................................................+++		.........................................................+++
	........................................................................................................................................................................................+++		........................................................................................................................................................................................+++
	writing new private key to 'MY_PRIVATE_KEY.~~key~~'		writing new private key to 'MY_PRIVATE_KEY.pem'
	-----		-----
	You are about to be asked to enter information that will be incorporated		You are about to be asked to enter information that will be incorporated
Line 51:		Line 51:

	=== Create a CSR (certificate signing request) from a private key ===		=== Create a CSR (certificate signing request) from a private key ===
	openssl req -key MY_PRIVATE_KEY.~~key~~ -new -out MY_CSR.csr		openssl req -key MY_PRIVATE_KEY.pem -new -out MY_CSR.csr
	You will be prompted to answer questions regarding the certificate:		You will be prompted to answer questions regarding the certificate:
	You are about to be asked to enter information that will be incorporated		You are about to be asked to enter information that will be incorporated
Line 193:		Line 193:
	=== Check that a certificate and a CSR match the private key ===		=== Check that a certificate and a CSR match the private key ===
	openssl x509 -noout -modulus -in MY_CERTIFICATE.crt \| openssl md5		openssl x509 -noout -modulus -in MY_CERTIFICATE.crt \| openssl md5
	openssl rsa -noout -modulus -in MY_PRIVATE_KEY.~~key~~ \| openssl md5		openssl rsa -noout -modulus -in MY_PRIVATE_KEY.pem \| openssl md5
	openssl req -noout -modulus -in MY_CSR.csr \| openssl md5		openssl req -noout -modulus -in MY_CSR.csr \| openssl md5

	All 3 commands should display the same MD5 hash:		All 3 commands should display the same MD5 hash:
	(stdin)= 41c46eddc15580673fe4adb8f5255634		(stdin)= 41c46eddc15580673fe4adb8f5255634

← Older revision		Revision as of 11:12, 27 November 2019
Line 1:		Line 1:
	This page provides useful shell commands and instructions to create and manipulate certificates with ~~FreeSBC~~.		This page provides useful shell commands and instructions to create and manipulate certificates with ProSBC.

	== Installing a custom private key and local certificate on ~~FreeSBC~~ ==		== Installing a custom private key and local certificate on ProSBC ==

	[[Create_A_SIP_Certificate_A#Upload_local_certificates_.28optional.29\|See WEB Portal configuration documentation]]		[[Create_A_SIP_Certificate_A#Upload_local_certificates_.28optional.29\|See WEB Portal configuration documentation]]

	== Use ~~FreeSBC~~ (or Linux) shell to manipulate certificates ==		== Use ProSBC (or Linux) shell to manipulate certificates ==
	You can use ~~FreeSBC~~'s shell (or most Linux hosts' shell as long as OpenSSL is installed) to create and view private keys, certificates and CSRs (certificate signing requests).		You can use ProSBC's shell (or most Linux hosts' shell as long as OpenSSL is installed) to create and view private keys, certificates and CSRs (certificate signing requests).

	=== Create new private key ===		=== Create new private key ===
Line 43:		Line 43:
	Organization Name (eg, company) [Default Company Ltd]:TelcoBridges		Organization Name (eg, company) [Default Company Ltd]:TelcoBridges
	Organizational Unit Name (eg, section) []:		Organizational Unit Name (eg, section) []:
	Common Name (eg, your name or your server's hostname) []:~~MyFreeSBC~~		Common Name (eg, your name or your server's hostname) []:MySBC
	Email Address []:support@telcobridges.com		Email Address []:support@telcobridges.com

Line 65:		Line 65:
	Organization Name (eg, company) [Default Company Ltd]:TelcoBridges		Organization Name (eg, company) [Default Company Ltd]:TelcoBridges
	Organizational Unit Name (eg, section) []:		Organizational Unit Name (eg, section) []:
	Common Name (eg, your name or your server's hostname) []:~~MyFreeSBC~~		Common Name (eg, your name or your server's hostname) []:MySBC
	Email Address []:support@telcobridges.com		Email Address []:support@telcobridges.com

Line 86:		Line 86:
	f3:fc:c5:72:ea:a9:50:a6		f3:fc:c5:72:ea:a9:50:a6
	Signature Algorithm: sha256WithRSAEncryption		Signature Algorithm: sha256WithRSAEncryption
	Issuer: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=~~MyFreeSBC~~/emailAddress=support@telcobridges.com		Issuer: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MySBC/emailAddress=support@telcobridges.com
	Validity		Validity
	Not Before: Mar 14 13:15:53 2019 GMT		Not Before: Mar 14 13:15:53 2019 GMT
	Not After : Mar 13 13:15:53 2020 GMT		Not After : Mar 13 13:15:53 2020 GMT
	Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=~~MyFreeSBC~~/emailAddress=support@telcobridges.com		Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MySBC/emailAddress=support@telcobridges.com
	Subject Public Key Info:		Subject Public Key Info:
	Public Key Algorithm: rsaEncryption		Public Key Algorithm: rsaEncryption
Line 147:		Line 147:
	Data:		Data:
	Version: 0 (0x0)		Version: 0 (0x0)
	Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=~~MyFreeSBC~~/emailAddress=support@telcobridges.com		Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MySBC/emailAddress=support@telcobridges.com
	Subject Public Key Info:		Subject Public Key Info:
	Public Key Algorithm: rsaEncryption		Public Key Algorithm: rsaEncryption