mirror of
https://github.com/MariaDB/server.git
synced 2025-01-29 10:14:19 +01:00
f0b1a331da
extra/yassl/README: Import patch yassl.diff extra/yassl/examples/client/client.cpp: Import patch yassl.diff extra/yassl/include/openssl/err.h: Import patch yassl.diff extra/yassl/include/openssl/md5.h: Import patch yassl.diff extra/yassl/include/openssl/ssl.h: Import patch yassl.diff extra/yassl/include/yassl_int.hpp: Import patch yassl.diff extra/yassl/mySTL/helpers.hpp: Import patch yassl.diff extra/yassl/src/cert_wrapper.cpp: Import patch yassl.diff extra/yassl/src/ssl.cpp: Import patch yassl.diff extra/yassl/src/template_instnt.cpp: Import patch yassl.diff extra/yassl/src/yassl_int.cpp: Import patch yassl.diff extra/yassl/taocrypt/include/asn.hpp: Import patch yassl.diff extra/yassl/taocrypt/src/asn.cpp: Import patch yassl.diff extra/yassl/taocrypt/src/integer.cpp: Import patch yassl.diff extra/yassl/taocrypt/src/make.bat: Import patch yassl.diff extra/yassl/taocrypt/src/misc.cpp: Import patch yassl.diff extra/yassl/taocrypt/taocrypt.dsp: Import patch yassl.diff extra/yassl/testsuite/test.hpp: Import patch yassl.diff extra/yassl/testsuite/testsuite.cpp: Import patch yassl.diff extra/yassl/testsuite/testsuite.dsp: Import patch yassl.diff extra/yassl/include/openssl/md4.h: Import patch yassl.diff extra/yassl/include/openssl/pem.h: Import patch yassl.diff extra/yassl/include/openssl/x509.h: Import patch yassl.diff extra/yassl/include/openssl/x509v3.h: Import patch yassl.diff extra/yassl/lib/dummy: Import patch yassl.diff extra/yassl/certs/ca-cert.pem: New BitKeeper file ``extra/yassl/certs/ca-cert.pem'' extra/yassl/certs/client-cert.pem: New BitKeeper file ``extra/yassl/certs/client-cert.pem'' extra/yassl/certs/client-key.pem: New BitKeeper file ``extra/yassl/certs/client-key.pem'' extra/yassl/certs/dsa-cert.pem: New BitKeeper file ``extra/yassl/certs/dsa-cert.pem'' extra/yassl/certs/dsa512.pem: New BitKeeper file ``extra/yassl/certs/dsa512.pem'' extra/yassl/certs/server-cert.pem: New BitKeeper file ``extra/yassl/certs/server-cert.pem'' extra/yassl/certs/server-key.pem: New BitKeeper file ``extra/yassl/certs/server-key.pem'' extra/yassl/certs/taoCert.txt: New BitKeeper file ``extra/yassl/certs/taoCert.txt''
50 lines
1.2 KiB
Text
50 lines
1.2 KiB
Text
|
|
***** Create a self signed cert ************
|
|
|
|
1) openssl genrsa 512 > client-key.pem
|
|
|
|
2) openssl req -new -x509 -nodes -md5 -days 1000 -key client-key.pem > client-cert.pem
|
|
|
|
-- adding metadata to beginning
|
|
|
|
3) openssl x509 -in client-cert.pem -text > tmp.pem
|
|
|
|
4) mv tmp.pem client-cert.pem
|
|
|
|
|
|
***** Create a CA, signing authority **********
|
|
|
|
same as self signed, use ca prefix instead of client
|
|
|
|
|
|
***** Create a cert signed by CA **************
|
|
|
|
1) openssl req -newkey rsa:512 -md5 -days 1000 -nodes -keyout server-key.pem > server-req.pem
|
|
|
|
2) copy ca-key.pem ca-cert.srl (why ????)
|
|
|
|
3) openssl x509 -req -in server-req.pem -days 1000 -md5 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 > server-cert.pem
|
|
|
|
|
|
|
|
***** To create a dsa cert ********************
|
|
|
|
1) openssl dsaparam 512 > dsa512.param # creates group params
|
|
|
|
2) openssl gendsa dsa512.param > dsa512.pem # creates private key
|
|
|
|
3) openssl req -new -x509 -nodes -days 1000 -key dsa512.pem > dsa-cert.pem
|
|
|
|
|
|
|
|
|
|
***** To convert from PEM to DER **************
|
|
|
|
a) openssl x509 -in cert.pem -inform PEM -out cert.der -outform DER
|
|
|
|
to convert rsa private PEM to DER :
|
|
|
|
b) openssl rsa -in key.pem -outform DER -out key.der
|
|
|
|
|
|
|