Differences
This shows you the differences between two versions of the page.
|
crypto [2012/05/22 01:29] mcb30 |
crypto [2012/08/01 12:35] (current) mcb30 |
||
|---|---|---|---|
| Line 59: | Line 59: | ||
| preserve = yes | preserve = yes | ||
| default_days = 90 | default_days = 90 | ||
| + | unique_subject = no | ||
| [ policy_anything ] | [ policy_anything ] | ||
| Line 119: | Line 120: | ||
| ===== Client certificates ===== | ===== Client certificates ===== | ||
| - | You can embed a client certificate (and the corresponding private) key when you [[:download|build]] iPXE using the ''%%CERT=...%%'' and ''%%PRIVKEY=...%%'' build parameters. For example, to use the client certificate ''client.crt'' with the corresponding private key in ''client.key'': | + | You can generate a client certificate ''client.crt'' and the corresponding private key ''client.key'' using: |
| + | |||
| + | openssl req -newkey rsa -keyout client.key -out client.req | ||
| + | openssl ca -config ca.cnf -in client.req -out client.crt | ||
| + | |||
| + | You can embed this client certificate (and the corresponding private key) when you [[:download|build]] iPXE using the ''%%CERT=...%%'' and ''%%PRIVKEY=...%%'' build parameters. For example: | ||
| make bin/ipxe.iso CERT=client.crt PRIVKEY=client.key | make bin/ipxe.iso CERT=client.crt PRIVKEY=client.key | ||
