Administrator Console 4 - 23
OpenSSL. This guide can not document all options. The following example illustrates one method of creating
custom certificates.
Custom Certificate Creation Example
The following example illustrates how to set up an OpenSSL-based certification authority to issue reader and
client certificates. These scripts can be executed in a Unix operating system or on Windows with a Unix shell
scripting environment such as Cygwin:
Create the following text files in a suitable folder:
•
caconfig.cnf - OpenSSL configuration file for Certification Authority certificate creation and signing
•
samplereader.cnf - OpenSSL configuration file for reader certificate creation
•
samplehost.cnf - OpenSSL configuration file for reader certificate creation
•
InitRootCA.sh - Script for initializing a new Root Certification Authority
•
CreateReaderCert.sh - Script for creating reader certificate
•
CreateClientCert.sh - Script for creating client certificate
File contents are as follows. Refer to OpenSSL (www.openssl.org) documentation for details on configuration
options. Edit configuration options to accommodate the deployment environment.
To Next Page
