This can be used to (re)generate x509v3 (PKIX) -compliant Root (and Intermediate) Certificate Authorities, and client/server certificates, using OpenSSL combined with Certificate Revocation Lists.
- Clone the repository.
- Run the new_certs.sh script.
- Choose a key size.
- Create a password for the new Root private key
- Re-enter the password to self-sign a new CA
- Confirm the CA details
- Repeat for Intermediate and server certificates
Licensed under GNU General Public License v3.0