This commit is contained in:
Alexander 2024-07-04 00:46:02 -04:00
parent 8f3168f9c9
commit a43c921324

View File

@ -121,31 +121,54 @@ openssl x509 -req -in mosquitto.csr -CA ca.crt -CAkey ca.key -CAcreateserial -ou
<p>These certificates are only needed if the mosquitto broker requires a certificate for client autentithication (require_certificate is set to true in mosquitto config)</p> <p>These certificates are only needed if the mosquitto broker requires a certificate for client autentithication (require_certificate is set to true in mosquitto config)</p>
```text ```text
# openssl genrsa -out esp.key 2048 openssl genrsa -out esp.key 2048
# openssl req -out esp.csr -key esp.key -new -subj '/CN=localhost' ```
# openssl x509 -req -in esp.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out esp.crt -days 365 -passin pass:1234 ```text
openssl req -out esp.csr -key esp.key -new -subj '/CN=localhost'
```
```text
openssl x509 -req -in esp.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out esp.crt -days 365 -passin pass:1234
``` ```
> [!NOTE] > [!NOTE]
> If the server (mosquitto) identifies the clients based on CN key, its necessary to set it to the correct value, or else it can be blank. See the Mosquitto config. > If the server (mosquitto) identifies the clients based on CN key, its necessary to set it to the correct value, or else it can be blank. See the Mosquitto config.
```text ```text
# openssl req -new -x509 -days 365 -extensions v3_ca -keyout ca.key -out ca.crt -passout pass:1234 -subj '/CN=myserver.dynamic-dns.net' openssl req -new -x509 -days 365 -extensions v3_ca -keyout ca.key -out ca.crt -passout pass:1234 -subj '/CN=myserver.dynamic-dns.net'
```
# openssl genrsa -out mosquitto.key 2048 ```text
# openssl req -out mosquitto.csr -key mosquitto.key -new -subj '/CN=localhost' openssl genrsa -out mosquitto.key 2048
# openssl x509 -req -in mosquitto.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out mosquitto.crt -days 365 -passin pass:1234 ```
```text
# openssl genrsa -out esp.key 2048 openssl req -out mosquitto.csr -key mosquitto.key -new -subj '/CN=localhost'
# openssl req -out esp.csr -key esp.key -new -subj '/CN=localhost' ```
# openssl x509 -req -in esp.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out esp.crt -days 365 -passin pass:1234 ```text
openssl x509 -req -in mosquitto.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out mosquitto.crt -days 365 -passin pass:1234
# openssl genrsa -out esp32.key 2048 ```
# openssl req -new -x509 -days 365 -extensions v3_ca -keyout esp32_ca.key -out esp32_ca.crt -passout pass:1234 -subj '/CN=192.168.50.16' ```text
# openssl req -out esp32.csr -key esp32.key -new -subj '/CN=192.168.50.16' openssl genrsa -out esp.key 2048
```
# openssl genrsa -out esp_node.key 2048 ```text
# openssl req -out esp_node.csr -key esp_node.key -new -subj '/CN=localhost' openssl req -out esp.csr -key esp.key -new -subj '/CN=localhost'
# openssl x509 -req -in esp32.csr -CA esp32_ca.crt -CAkey esp32_ca.key -CAcreateserial -out esp_node.crt -days 365 -passin pass:1234 ```
```text
openssl x509 -req -in esp.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out esp.crt -days 365 -passin pass:1234
```
```text
openssl genrsa -out esp32.key 2048
```
```text
openssl req -new -x509 -days 365 -extensions v3_ca -keyout esp32_ca.key -out esp32_ca.crt -passout pass:1234 -subj '/CN=192.168.50.16'
```
```text
openssl req -out esp32.csr -key esp32.key -new -subj '/CN=192.168.50.16'
```
```text
openssl genrsa -out esp_node.key 2048
```
```text
openssl req -out esp_node.csr -key esp_node.key -new -subj '/CN=localhost'
```
```text
openssl x509 -req -in esp32.csr -CA esp32_ca.crt -CAkey esp32_ca.key -CAcreateserial -out esp_node.crt -days 365 -passin pass:1234
``` ```