User's Manual

PePLink Surf User’s Manual v2.6

5 Appendix - Demo CA and Server Certification

Generation Instructions

5.1 Prerequisite

OpenSSL v0.9.7a or above

Note: The illustration below is based on Linux.

5.2 Create your own Certificate Authority (CA)

1. Create a working directory (e.g. ~/demoCA)

mkdir ~/demoCA

chmod 700 ~/demoCA

cd ~/demoCA

mkdir private certs newcerts

echo -n 01 > serial

touch index.txt

2. Create a private key for your CA, for example:

openssl genrsa -des3 -passout pass:democa -out private/cakey.pem 2048

(A CA private key called "cakey.pem" is then created in the directory

"private". This is a 2048bit RSA private key with pass phrase 'democa'.)

3. Create the server certificate for your CA, for example:

openssl req -new -x509 -days 8000 -key private/cakey.pem -passin pass:democa

-out cacert.pem

Then a series of questions will be asked:

You are about to be asked to enter information that will be incorporated into

your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.