WTE TReX-460, Руководство пользователя

Страница: 244 / 302

TReX User Manual v15.30 Firmware
Next, this private key is used to generate the CA certificate. OpenSSL will request both the
passphrase of the generated key as well as information related to the organisation that will be
issuing the server certificate (i.e. the organisation using the TReX).
> openssl req -x509 -new -nodes -key cakey.pem -sha256 -days 365 -out ca.pem
Enter pass phrase for key.pem:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NZ
State or Province Name (full name) [Some-State]:Canterbury
Locality Name (eg, city) []:Christchurch
Organization Name (eg, company) [Internet Widgits Pty Ltd]:WTE Ltd
Organizational Unit Name (eg, section) []:IT Department
Common Name (e.g. server FQDN or YOUR name) []:WTE-TReX
Email Address []:info@wte.co.nz
This will generate a CA certificate file named ca.pem . If multiple TReX devices are being used
as servers, this CA certificate only needs to be generated once.
Server Private Key and Certificate Signing Request
The next step is to generate a private key that will be used by the TReX server. This is done in
a similar manner to the CA private key.
> openssl genrsa -aes256 -out key.pem 2048
Generating RSA private key, 4096 bit long modulus (2 primes)
.........++++
..............++++
e is 65537 (0x010001)
Enter pass phrase for key.pem:
Verifying - Enter pass phrase for key.pem:
This will generate a 2048-bit key file named “key.pem”. This key file will be encrypted. For
the TReX to use the key, it must be decrypted with the following command:
> openssl rsa -in key.pem -out key.pem
Enter pass phrase for key.pem:
writing RSA key
With this decrypted private key, generate a Certificate Signing Request.
> openssl req -new -key key.pem -out server.csr
Enter pass phrase for key.pem:
Country Name (2 letter code) [AU]:NZ
State or Province Name (full name) [Some-State]:Canterbury
Locality Name (eg, city) []:Christchurch
Organization Name (eg, company) [Internet Widgits Pty Ltd]:WTE Ltd
Organizational Unit Name (eg, section) []:IT Department
© WTE Limited, 2022 – Christchurch New Zealand
Page 244 of 302