Administrator Console
62
Custom Certificate Creation Example
The following example illustrates how to set up an OpenSSL-based certification authority to issue
reader and client certificates. These scripts can be executed in a Unix operating system or on
Windows with a Unix shell scripting environment such as Cygwin:
Create the following text files in a suitable folder on the host machine:
• caconfig.cnf - OpenSSL configuration file for Certification Authority certificate creation and
signing
• samplereader.cnf - OpenSSL configuration file for reader certificate creation
• samplehost.cnf - OpenSSL configuration file for reader certificate creation
• InitRootCA.sh - Script for initializing a new Root Certification Authority
• CreateReaderCert.sh - Script for creating reader certificate
• CreateClientCert.sh - Script for creating client certificate
File contents are as follows. Refer to OpenSSL (www.openssl.org) documentation for details on
configuration options. Edit configuration options to accommodate the deployment environment.