Are you trying to create the SSL key certificate chain for the superb KACE K3000 ?
\nUse this short guide. Disclaimer; I found most of it on the web, but has made some alterations to handle the 2014+ security.<\/p>\n
openssl genrsa -des3 -out ca.key 4096
\nopenssl req -new -x509 -days 1825 -key ca.key -out ca.crt
\nopenssl x509 -in ca.crt -out ca.pem
\nopenssl genrsa -des3 -out ca-int_encrypted.key 4096
\nopenssl rsa -in ca-int_encrypted.key -out ca-int.key
\nopenssl req -new -key ca-int.key -out ca-int.csr -subj “\/CN=ca-int@acme.com”
\nopenssl x509 -req -days 1825 -in ca-int.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out ca-int.crt<\/p>\n
openssl genrsa -des3 -out server_encrypted.key 4096
\nopenssl rsa -in server_encrypted.key -out server.key
\nopenssl req -new -key server.key -out server.csr -subj “\/CN=server@acme.com”
\nopenssl x509 -req -days 1825 -in server.csr -CA ca-int.crt -CAkey ca-int.key -set_serial 01 -out server.crt <\/p>\n
Remember to replace server@acme.com and ca-int@acme.com with your fully qualified servername. This worked for me for creating a KACE demo environment with K1000 + K2000 + K3000 chained together. <\/p>\n","protected":false},"excerpt":{"rendered":"
Are you trying to create the SSL key certificate chain for the superb KACE K3000 ? Use this short guide. Disclaimer; I found most of it on the web, but has made some alterations to handle the 2014+ security. openssl genrsa -des3 -out ca.key 4096 openssl req -new -x509 -days 1825 -key ca.key -out ca.crt […]<\/p>\n","protected":false},"author":2,"featured_media":1707,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"KACE K3000 and SSL Certificates","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[80,455],"tags":[691,699,700,701,697,696,28,698],"class_list":["post-1708","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dell-mikael","category-inenglish","tag-691","tag-certificates","tag-chain","tag-intermediate","tag-k3000","tag-kace","tag-key","tag-ssl"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"http:\/\/mikaeljensen.dk\/blog\/wp-content\/uploads\/SSL-Schema.gif","_links":{"self":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1708"}],"version-history":[{"count":1,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1708\/revisions"}],"predecessor-version":[{"id":1709,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1708\/revisions\/1709"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/media\/1707"}],"wp:attachment":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1708"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}