MUG :: Michigan!/usr/group

PKI Tools

• OpenSSL Library
• • x509 - Certificate display and signing utility
  • req - PKCS#10 certificate request and certificate generating utility.
  • ca - sample minimal CA application
  • genrsa - generate an RSA private key
  • rsa - RSA key processing tool
  • crl - CRL utility
  • verify - Utility to verify certificates

  •         Create the Self Signed Root Certificate
                []$ openssl req -x509 -new -nodes -keyout ca.key -out ca.crt
    
            Generating Certificates:
            Create Key and Signing request in one command
                (implied: openssl genrsa -nodes -out mycert.key 1024)
                []$ openssl req -nodes -new -keyout mycert.key -out mycert.csr
            
    

• tinyca
• • is a simple graphical userinterface written in Perl/Gtk to manage a small CA (Certification Authority)
• easyrsa
• • A small RSA key management package, based on the openssl command line tool