Linux Shell Scripting Cookbook - Third Edition

Creating certificates

First, make sure you've got a clean slate with nothing left over from previous installations:

# cd /usr/share/easy-rsa 
# . ./vars 
# ./clean-all 

NOTE: If you run ./clean-all, I will be doing a rm -rf on /usr/share/easy-rsa/keys.

Next, create the Certificate Authority key with the build-ca command. This command will prompt you for information about your site. You'll have to enter this information several times. Substitute your name, e-mail, site name, and so on for the values in this recipe. The required information varies slightly between commands. Only the unique sections will be repeated in these recipes:

# ./build-ca 
Generating a 2048 bit RSA private key 
......+++ 
.....................................................+++ ...