Also verify intermediate certificate authority certificate.

This commit is contained in:
inference 2023-05-30 00:36:59 +01:00
parent c6e9629bb1
commit 0205b439ff
Signed by: inference
SSH Key Fingerprint: SHA256:9Pl0nZ2UJacgm+IeEtLSZ4FOESgP1eKCtRflfPfdX9M

View File

@ -1,6 +1,6 @@
= OpenSSL Certificate Chain = OpenSSL Certificate Chain
Version: 0.0.0.3 Version: 0.0.0.4
This documentation contains the complete set of commands to create a new OpenSSL self-signed This documentation contains the complete set of commands to create a new OpenSSL self-signed
@ -36,6 +36,9 @@ Each key can be encrypted or unencrypted, with multiple encryption options; AES
== Create Intermediate Certificate Authority Certificate == Create Intermediate Certificate Authority Certificate
`openssl ca -config intermediate.conf -extensions v3_intermediate_ca -days 1096 -notext -md sha256 -in intermediate-csr.pem -out intermediate-crt.pem` `openssl ca -config intermediate.conf -extensions v3_intermediate_ca -days 1096 -notext -md sha256 -in intermediate-csr.pem -out intermediate-crt.pem`
== Verify Intermediate Certificate Authority Certificate
`openssl x509 -noout -text -in intermediate-crt.pem`
== Verify Chain of Trust (CA to Intermediate) == Verify Chain of Trust (CA to Intermediate)
`openssl verify -CAfile ca-crt.pem intermediate-crt.pem` `openssl verify -CAfile ca-crt.pem intermediate-crt.pem`