Generating SSL Certificates › Creating the Client Certificate

Creating the Client Certificate

To create the client certificate

1. Create a configuration file to use as input to the openssl utility. A sample file, clientssl.conf, was installed in the ssl subdirectory. Edit the [req_distinguished_name] section, changing the values to meet your system requirements.

   Note: For UNIX, you must have root authority to perform this task.

2. Issue the following command to use the makeclient script:

   ./makeclient
   

   The makeclient shell script uses the clientssl.conf file and the cassl.pem file to generate a client certificate and a key file. The certificate, clientcert.pem, is saved in the 'certs' subdirectory. The key file, generated as clientkey.pem, is saved in the 'private' subdirectory.

3. To list the certificate just created, issue the following command to use the listclient script:

   ./listclient
   

   The listclient shell script displays the client certificate and information stored in the package.