localhost ~ # openssl req -newkey rsa:1024 -keyout cle-privee.key -out cle-publique.req
Generating a 1024 bit RSA private key
.....................++++++
.....++++++
writing new private key to 'cle-privee.key'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [CA]:
State or Province Name (full name) [Québec]:
Locality Name (eg, city) [Charlemagne]:
Organization Name (eg, company) [DS]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:éè
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
localhost ~ # openssl ca -in cle-publique.req -out certificat.pem
Using configuration from /etc/ssl/openssl.cnf
Enter pass phrase for /etc/ssl/metres.homelinux.com/private/cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
Serial Number: 2 (0x2)
Validity
Not Before: Jun 23 20:03:46 2007 GMT
Not After : Jun 22 20:03:46 2008 GMT
Subject:
countryName = CA
stateOrProvinceName = Qu\E9bec
organizationName = DS
commonName = éè
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
OpenSSL Generated Certificate
X509v3 Subject Key Identifier:
C3:7E:FC:69:47:71:16:12:F9:D9:85:FB:05:2A:4E:5B:C2:39:73:28
X509v3 Authority Key Identifier:
keyid:7A:AF:92:04:AF:49:8A:BB:85:AD:02:A4:3E:E6:91:67:B5:7D:4C:11
Certificate is to be certified until Jun 22 20:03:46 2008 GMT (365 days)
Sign the certificate? [y/n]:n
CERTIFICATE WILL NOT BE CERTIFIED