Page 2 - Certificate Generation; Generating Certificates with OpenSSL; The openssl.cnf Configuration File; Server or Client
2-2 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Generating Certificates with OpenSSL The CR usually contains the following: • An RSA key-pair • Subject name (possibly in DN format) • Desired lifetime of the certificate • Name or identification...
Page 3 - shows an example of an openssl.cnf file,
2-3 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Generating Certificates with OpenSSL export OPENSSL_CONF /opts/open/openssl.cnf • Specifying the –config option on the command line openssl <additional parameters> config ./openssl.cnf The ...
Page 4 - Required Certificate Extensions; Creating a CA Directory; mkdir ca; Creating a Self-signed CA Root Certificate and RSA Key
2-4 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Generating Certificates with OpenSSL Required Certificate Extensions PEAP and EAP-TLS require server certificates to include an extendedKeyUsage extension of TLS Server Authentication and client ...
Page 5 - Converting a CA Certificate to PKCS#12; Creating a Client Certificate Request
2-5 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Generating Certificates with OpenSSL Use the following command to display the certificate: openssl x509 –in ./ca/certs/root-cert.pem –text Converting a CA Certificate to PKCS#12 Use the following...
Page 6 - Converting a Client Certificate and Private Key to PKCS#12; Certificate Generation with Windows CA
2-6 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Use the following command to display the server certificate: openssl x509 –in ./ca/certs/client-cert.pem –text Converting a Client Certificate and Private K...
Page 7 - Generating a Server Certificate; Select Request a Certificate and click Next.
2-7 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Generating a Server Certificate This section describes how to generate a server certificate. Step 1 Use your browser to access the Windows Certificate Servi...
Page 8 - Select Advanced request and click Next.
2-8 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-3 Selecting Certificate Request Type Step 3 Select Advanced request and click Next. The next window enables you to select the method used to reques...
Page 11 - Generating a Client Certificate
2-11 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-6 Certificate Pending Step 6 Click Home (near upper right corner of form) to return to the Certificate Services home page. Generating a Client Cer...
Page 13 - Certificate Retrieval; Click Next to proceed.
2-13 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Certificate Retrieval From the Certificate Services home page, select Check on a pending certificate. Figure 2-8 Example of Check Pending Certificate Reque...
Page 14 - Select the appropriate request from the list and click Next.
2-14 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-9 Check Pending Certificate Requests Step 8 Select the appropriate request from the list and click Next. If the certificate you request has not ye...
Page 15 - Click Install this certificate to continue.
2-15 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-11 Certificate Issued Step 9 Click Install this certificate to continue. Note Depending on your configuration, you might be asked to confirm your ...
Page 16 - Exporting Server and Client Certificates; Navigate to the Certificates dialog box with these steps:
2-16 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-12 Certificate Installed Confirmation Exporting Server and Client Certificates The certificate and private key must be exported from Windows befor...
Page 18 - Select Yes, export the private key and click Next to continue.; Click Next to continue.
2-18 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-15 Export Private Key Step 6 Select Yes, export the private key and click Next to continue. The next window allows you to select the format of the...
Page 19 - After entering the password, click Next to continue.; After entering the file name, click Next to continue.
2-19 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-17 Export Wizard Password After entering the password, click Next to continue. The next screen prompts you to specify (or browse to) the name of f...
Page 20 - Exporting CA Certificates
2-20 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Figure 2-19 Completing the Certificate Export Step 9 Click Finish to complete the export operation. If successful, the message shown in Figure 2-20 display...
Page 22 - Converting PKCS#12 to PEM; Convert the PKCS#12 file to PEM format using openssl.
2-22 WLSE Express AAA Server Certificate Configuration Guide OL-8880-01 Chapter 2 Generating Certificates Certificate Generation with Windows CA Converting PKCS#12 to PEM A certificate and private key that have been exported from Windows will generally be encapsulated in a single file in PKCS#12 for...