CLI certificate generation
Generate client's private key and a certificate signing request (CSR) (please do not change CN):
openssl req -new -newkey rsa:2048 -out cli.csr -subj "/C=CH/ST=Berne/L=Berne/O=Hitachi Power Grids Switzerland Ltd./OU=PGGA,PG/CN=cli" -keyout cli.pem -nodes
Sign client's CSR with server private key and a create related certificate:
openssl x509 -req -days 3650 -sha256 -in cli.csr -CA diracCA.crt -CAkey server.key -CAcreateserial -out cli.crt
Delete CSR:
rm cli.csr
We have now following new files in our folder:
-rw-rw-r--. 1 dirac dirac 1281 May 5 06:34 cli.crt
-rw-------. 1 dirac dirac 1704 May 5 06:32 cli.pem
-rw-rw-r--. 1 dirac dirac 41 May 5 06:34 diracCA.srl