friendlyelec
/
rk35xx-android12
1
0
Fork 0
Code Releases Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'e936813e6d'
${ noResults }
rk35xx-android12/external/openscreen/test/data/cast/common/certificate/certificates/README.md

732 B
Raw Blame History

Generating Certificates

Name Constraints Examples

The following commands were used along with extensions.conf to generate the certificates in nc.pem and nc_fail.pem.

# Once for each certificate.
$ openssl genrsa -out keyN.pem 2048
$ openssl req -new -key keyN.pem -out certN.csr

# <extension> will be v3_ca_nc for the intermediate and v3_req for the device.
$ openssl x509 -req -in certN.csr -CA certN-1.pem -CAkey keyN-1.pem
    -CAcreateserial -extensions <extension> -extfile extensions.conf -out
    certN.pem -days 365 -sha256

Note: it looks like openssl req also accepts extensions via -reqexts but there is a known bug in openssl where extensions are transferred between CSRs and X509 certs.