|
@@ -3,10 +3,10 @@
|
|
# the service is protected by client's certificate verification
|
|
# the service is protected by client's certificate verification
|
|
# mechanism. Before using this configuration a server administrator
|
|
# mechanism. Before using this configuration a server administrator
|
|
# must generate server certificate and private key as well as
|
|
# must generate server certificate and private key as well as
|
|
-# the certifiate authority (CA). The clients' certificates must
|
|
|
|
|
|
+# the certificate authority (CA). The clients' certificates must
|
|
# be signed by the CA.
|
|
# be signed by the CA.
|
|
#
|
|
#
|
|
-# Note that the steps provided below to generate and setup certifcates
|
|
|
|
|
|
+# Note that the steps provided below to generate and setup certificates
|
|
# are provided as an example for testing purposes only. Always
|
|
# are provided as an example for testing purposes only. Always
|
|
# consider best known security measures to protect your production
|
|
# consider best known security measures to protect your production
|
|
# environment.
|
|
# environment.
|
|
@@ -22,7 +22,7 @@
|
|
# openssl req -new -x509 -days 365 -key ca.key -out ca.crt
|
|
# openssl req -new -x509 -days 365 -key ca.key -out ca.crt
|
|
#
|
|
#
|
|
#
|
|
#
|
|
-# The client certifcate needs to be generated and signed:
|
|
|
|
|
|
+# The client certificate needs to be generated and signed:
|
|
#
|
|
#
|
|
# openssl genrsa -des3 -out kea-client.key 4096
|
|
# openssl genrsa -des3 -out kea-client.key 4096
|
|
# openssl req -new -key kea-client.key -out kea-client.csr
|
|
# openssl req -new -key kea-client.key -out kea-client.csr
|