8.1.4 Certificate generation
To generate a certificate using the private key, use the command:
| | $ certtool --generate-certificate --load-privkey key.pem \
--outfile cert.pem --load-ca-certificate ca-cert.pem \
--load-ca-privkey ca-key.pem
|
Alternatively you may create a certificate request, which is needed
when the certificate will be signed by a third party authority.
| | $ certtool --generate-request --load-privkey key.pem \
--outfile request.pem
|
To generate a certificate using the previous request, use the command:
| | $ certtool --generate-certificate --load-request request.pem \
--outfile cert.pem \
--load-ca-certificate ca-cert.pem --load-ca-privkey ca-key.pem
|
