Unfortunately I had to re-evaluate my SSL config for the SSL-chain on the Kace K3000 virtual appliance.
\nBut what I found was i neat script that created the right key + certificate and intermediate certificate.
\nUse this for your own convinience.
\n———-snip——————-
\n# SHA512 testcase — all 3 layers.
\n#
\nLEN=${LEN:-2048}<\/p>\n
# create a root.
\nopenssl req -new -x509 -nodes -out ca.crt -keyout ca.key -subj \/CN=DaRoot -newkey rsa:$LEN -sha512 || exit 1<\/p>\n
# create an intermediate & sign
\nopenssl req -new -nodes -out ca-int.req -keyout ca-int.key -subj \/CN=Zintermediate -newkey rsa:$LEN -sha512 || exit 1
\nopenssl x509 -req -in ca-int.req -CAkey ca.key -CA ca.crt -days 20 -set_serial $RANDOM -sha512 -out ca-int.crt || exit 1<\/p>\n
# chain
\n#
\ncat ca.crt ca-int.crt > ca-all.crt<\/p>\n
for who in 192.168.1.45
\ndo
\n# create a request
\nopenssl req -new -out $who.req -keyout $who.key -nodes -newkey rsa:$LEN -subj \/CN=$who\/emailAddress=$mikael_jensen@dell.com || exit 1<\/p>\n
# sign the request
\nopenssl x509 -req -in $who.req -CAkey ca-int.key -CA ca-int.crt -days 10 -set_serial $RANDOM -sha512 -out $who.crt || exit 1<\/p>\n
# create some convenience formats
\n#
\nopenssl x509 -in $who.crt -out $who.der -outform DER || exit 1
\nopenssl pkcs12 -export -out $who.p12 -in $who.crt -inkey $who.key -chain -CAfile ca-all.crt -password pass:$PASS || exit 1
\ndone<\/p>\n
——————-snip done——————-<\/p>\n
Use this as a script on a *nix machine with openssl package installed. I did it on a Fedora 20 laptop.<\/p>\n","protected":false},"excerpt":{"rendered":"
Unfortunately I had to re-evaluate my SSL config for the SSL-chain on the Kace K3000 virtual appliance. But what I found was i neat script that created the right key + certificate and intermediate certificate. Use this for your own convinience. ———-snip——————- # SHA512 testcase — all 3 layers. # LEN=${LEN:-2048} # create a root. […]<\/p>\n","protected":false},"author":2,"featured_media":1710,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[80,455],"tags":[705,700,704,701,697,696,28,703,698,702,706],"class_list":["post-1711","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dell-mikael","category-inenglish","tag-705","tag-chain","tag-fedora","tag-intermediate","tag-k3000","tag-kace","tag-key","tag-openssl","tag-ssl","tag-vk3000","tag-x509"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"http:\/\/mikaeljensen.dk\/blog\/wp-content\/uploads\/ssl.jpg","_links":{"self":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1711"}],"version-history":[{"count":2,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1711\/revisions"}],"predecessor-version":[{"id":1713,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1711\/revisions\/1713"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=\/wp\/v2\/media\/1710"}],"wp:attachment":[{"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1711"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/mikaeljensen.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}