Differences

This shows you the differences between two versions of the page.

--- пакет_openssl [2022/01/14 15:25]
val [Интерактивное подключение по ssl]
+++ пакет_openssl [2022/12/30 16:09]
val [Создание запроса на сертификат]
@@ Line 18: / Line 18: @@
 $ openssl s_client -CApath /etc/ssl/certs/ -showcerts -connect student.bmstu.ru:443
+$ openssl s_client -showcerts -connect webinar6.bmstu.ru:443 2>/dev/null | openssl x509 -noout -dates
 $ faketime -f "+500d" ...
@@ Line 85: / Line 87: @@
 ==== Создание сертификата ====
 <code>
-server# openssl req -new -x509 -addext "subjectAltName=DNS:server.corpX.un" -days 3650 -key server.key -out server.crt
+server# openssl req -new -x509 -days 3650 -key server.key -out server.crt -addext "subjectAltName=DNS:server.corpX.un"
 </code><code>
 ...
@@ Line 93: / Line 95: @@
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:cko
 Organizational Unit Name (eg, section) []:noc
-Common Name (eg, YOUR name) []:server.corpX.un
+Common Name (eg, YOUR name) []:server.corpX.un       !!!! для некоторых сервисов (ovpn) не должно быть пустым
 Email Address []:noc@corpX.un
 </code>
@@ Line 236: / Line 238: @@
 lan# scp /etc/ssl/openssl.cnf www:/etc/ssl/
-www# openssl req -new -key www.key -out www.req
+www# openssl req -new -key www.key -out www.req   #-sha256
 </code><code>
 ...

Методические материалы Лохтурова Вячеслава