Configuring and Managing MPE/iX Internet Services (MPE/iX 6.5)

176 Chapter10
HP WebWise MPE/iX Secure Web Server
Server Keys and Certificates
4. $ openssl req -new -x509 -days 365 -key ca.key -out ca.crt
Using configuration from /APACHE/SECURE/ssl/openssl.cnf
Enter PEM pass phrase:********
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:My State
Locality Name (eg, city) []:My City
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My Company
Organizational Unit Name (eg, section) []:My Company CA
Common Name (eg, YOUR name) []:Certificate Authority
Email Address []:[e-mail]
5. $ openssl x509 -noout -text -in ca.crt (displays the details of your newly
created CA certificate)
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 0 (0x0)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=US, ST=My State, L=My City, O=My Company, OU=My Company
CA, CN=Certificate Authority/Email=[e-mail]
Validity
Not Before: Apr 13 18:29:50 2000 GMT
Not After : Apr 13 18:29:50 2001 GMT
Subject: C=US, ST=My State, L=My City, O=My Company, OU=My Company
CA, CN=Certificate Authority/Email=[e-mail]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:a8:f9:f5:38:07:dd:6b:84:51:a6:34:43:15:fa:
ae:3c:08:24:dc:60:6d:ea:e4:ab:8d:13:f3:bb:48:
b9:e9:eb:e9:a7:74:58:87:4b:10:4b:a1:09:c0:c4:
7b:88:5e:9c:14:7b:da:bd:9f:5f:d2:b9:19:51:f0:
c3:a4:43:10:ec:13:6a:f9:72:25:e2:fe:6e:57:67:
0d:7a:dc:3f:a5:63:d2:d2:32:69:f3:d2:6d:1b:f3:
70:06:70:28:eb:a8:9f:06:ad:f1:ab:a3:30:db:a7:
54:37:f7:75:85:90:26:d0:28:e8:f6:d6:65:93:82:
ef:02:88:f4:c7:0b:91:1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:C8:ED:17:82:61:39:C5:1D:9F:E9:12:73:75:C8:31:EA:DF:33
X509v3 Authority Key Identifier:
keyid:89:B4:C8:ED:17:82:61:39:C5:1D:9F:E9:12:73:75:C8:31:EA:DF:33
DirName:/C=US/ST=My State/L=My City/O=My Company/OU=My
Company CA/CN=Certificate Authority/Email=[e-mail]
serial:00
X509v3 Basic Constraints: