User Tools

Site Tools


setup:pki

This is an old revision of the document!


Public Key Infrastructure

Good extensions for certificates

Root CA

        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                xx:xx:xx:xx:xx:xx:xx:xx:xx:...:xx:xx:xx
            

Intermediate CA

User certificate

Server certificate

OCSP certificate

About CRLs

Commands

setup/pki.1627568646.txt.gz · Last modified: 2021/07/29 16:24 by root

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki