Differences

This shows you the differences between two versions of the page.

--- devel:documentation:internal_ca [2024/02/06 09:58]
koulaj
+++ devel:documentation:internal_ca [2024/02/06 10:16]
koulaj
@@ Line 1: / Line 1: @@
-<- .:testing | ^ .:start | Documentation ^  ->
+<- .:testing | ^ .:start | Documentation ^ ->
 ===== Internal CA =====
-tbd
+There's local CA on appliance195. It has its repository ''git@git.bcvsolutions.eu:czechidm/idstory-product-development-ca.git'', where all generated certificates should be stored (as backup).
+===== How to generate new server certificate =====
+<code>
+cd /root/easyrsa3/
+./easyrsa build-server-full applianceXYZ.bcv nopass
+git add .
+git commit -m "Certifikat pro applianceXYZ.bcv"
+git push
+</code>
+Generated files:
+  * certificate: ''/root/easyrsa3/pki/issued/applianceXYZ.bcv.crt''
+  * private key: ''/root/easyrsa3/pki/private/appliance195.bcv.key''
+  * (CA certificate to be put on server is in ''/root/easyrsa3/pki/ca.crt'')