Differences

This shows you the differences between two versions of the page.

--- linux:openssl:generar_ca_y_certificado_autofirmado [2023/08/31 13:46] – dodger
+++ linux:openssl:generar_ca_y_certificado_autofirmado [2023/08/31 15:42] (current) – dodger
@@ Line 33: / Line 33: @@
 mv $(hostname).key ../ssl.key/
 </code>
+===== Generating DHPARAMS =====
+<code bash>
+openssl dhparam -dsaparam -out /etc/ssl/private/dhparam2.pem 4096
+</code>
+[[https://security.stackexchange.com/questions/95178/diffie-hellman-parameters-still-calculating-after-24-hours|Link]]
 ====== Troubleshoot ======
 ===== Errores con el demoCA o index.txt =====
+==== quick fix ====
+<code bash>
+export SSL_CONFIG="/etc/ssl/openssl.cnf"
+export SSL_CAPATH="/etc/ssl/CA"
+sed -i "s,.demoCA,${SSL_CAPATH},g" ${SSL_CONFIG}
+mkdir -p ${SSL_CAPATH}/{certs,crl,newcerts}
+touch ${SSL_CAPATH}/index.txt
+echo "01" > ${SSL_CAPATH}/serial
+</code>
+==== long explanation ====
 En determinadas ocasiones no se generan los directorios/ficheros correctamente, de ahí errores del tipo:
 <code bash>
@@ Line 58: / Line 80: @@
 Hay que editar el fichero de configuración del openssl, en este caso:
 <code bash>
-vi /etc/pki/tls/openssl.cnf
+vim /etc/ssl/openssl.cnf
 </code>