Linux OpenSSL sample configuration files

Copyleft and disclaimer of warranty

Links: OpenSSL.

Please note that because of some limitations in the OpenSSL configuration files, all of them are generated by preprocessing the corresponding .ini files listed here, as specified in the Makefile, and the definitions common to all configuration files are contained in the default.ini.

All files contain extensive comments, and in particular default.ini contains a suitable list of references. Please read all these references carefully and several times. Unfortunately CA operation and certificate generation, even for a private, informal CA, involves difficult concepts and complicated details, especially with OpenSSL, and it is not something to be attempted without an in depth understanding of the general issues and of the peculiarities related to OpenSSL.

You probably will need to customize all all the files in this directory to adapt them to your case. As they are here, they are set up for a private CA called Example Ltd. and for this to accept a request and grant a certificate for the domain example.com.

If you need a simpler approach to generate simple certificates, the GNU TLS library comes with the certtool utility.

Icon  Name                             Last modified      Size  Description
[DIR] Parent Directory - [TXT] Makefile 06-Aug-2004 15:11 2.2K [TXT] com.example.SSL_CertRequest.ini 06-Aug-2004 14:34 2.3K [TXT] com.example.SSL_Certificate.ini 06-Aug-2004 14:39 1.6K [TXT] com.example_CACertificate.ini 06-Aug-2004 14:34 2.6K [TXT] default.ini 06-Aug-2004 14:34 15K